PT-2022-9925 · Freebsd · Freebsd

Oleg Bulyzhin · Published 2022-01-11 · Updated 2022-03-04 · CVE-2021-29632

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 13.0-STABLE n247428-9352de39c3dc FreeBSD versions prior to 12.2-STABLE r370674 FreeBSD versions prior to 13.0-RELEASE p6 FreeBSD versions prior to 12.2-RELEASE p12

Description The issue involves certain conditions with the use of the highlight buffer while text is scrolling on the console. This can lead to console data overwriting data structures associated with the system console or other kernel memory.

Recommendations For FreeBSD 13.0-STABLE, update to a version after n247428-9352de39c3dc. For FreeBSD 12.2-STABLE, update to a version after r370674. For FreeBSD 13.0-RELEASE, update to a version after p6. For FreeBSD 12.2-RELEASE, update to a version after p12.

Fix

Related Identifiers

CVE-2021-29632

FREEBSD-SA-22_01

Affected Products

Freebsd

References · 5

• https://osv.dev/vulnerability/CVE-2021-29632 · Vendor Advisory
• https://security.freebsd.org/advisories/FreeBSD-SA-22:01.vt.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29632 · Security Note
• https://security.netapp.com/advisory/ntap-20220217-0004 · Note
• https://freebsd.org/security/advisories/FreeBSD-SA-22:01.vt.asc · Note