CVE-2009-1935

Опубликовано: 18 июн. 2009

Источник: nvd

CVSS2: 4.9

EPSS Низкий

Описание

Integer overflow in the pipe_build_write_buffer function (sys/kern/sys_pipe.c) in the direct write optimization feature in the pipe implementation in FreeBSD 7.1 through 7.2 and 6.3 through 6.4 allows local users to bypass virtual-to-physical address lookups and read sensitive information in memory pages via unspecified vectors.

Ссылки

http://osvdb.org/55044
http://secunia.com/advisories/35398
Vendor Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-09:09.pipe.asc
Patch
Vendor Advisory
http://security.freebsd.org/patches/SA-09:09/pipe.patch
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/35279
http://www.securitytracker.com/id?1022365
https://exchange.xforce.ibmcloud.com/vulnerabilities/51109
http://osvdb.org/55044
http://secunia.com/advisories/35398
Vendor Advisory
http://security.freebsd.org/advisories/FreeBSD-SA-09:09.pipe.asc
Patch
Vendor Advisory
http://security.freebsd.org/patches/SA-09:09/pipe.patch
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/35279
http://www.securitytracker.com/id?1022365
https://exchange.xforce.ibmcloud.com/vulnerabilities/51109

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3:release_p10:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.3_releng:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:release_p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:6.4:stable:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:pre-release:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:rc1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:release-p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:release-p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:release-p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.1:stable:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:7.2:pre-release:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.0007

Низкий

4.9 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2009-1935

debian

больше 16 лет назад

Integer overflow in the pipe_build_write_buffer function (sys/kern/sys ...

GHSA-c36p-gqxq-hcgq

github

почти 4 года назад