PT-2017-2030 · Freebsd · Freebsd

Brent Cook + 2 · Published 2016-01-27 · Updated 2017-02-17 · CVE-2016-1883

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3 through 10.2

Description The issue is related to the issetugid system call in the Linux compatibility layer, which has inadequate access control. This allows a local user to gain privilege via unspecified vectors.

Recommendations For versions 9.3 through 10.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2017-01197

CVE-2016-1883

FREEBSD-SA-16_10

Affected Products

Freebsd

References · 5

• https://freebsd.org/security/advisories/FreeBSD-SA-16:10.linux.asc · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01197 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1883 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1883 · Security Note
• http://securitytracker.com/id/1034872 · Note