Описание
A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.
Ссылки
- ExploitVendor Advisory
- ExploitThird Party Advisory
- PatchVendor Advisory
- Release NotesVendor Advisory
- ExploitVendor Advisory
- ExploitThird Party Advisory
- PatchVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.7 (исключая)Версия от 1.3 (включая) до 2020-08-19 (включая)
Одно из
cpe:2.3:a:midnightbsd:midnightbsd:*:*:*:*:*:*:*:*
cpe:2.3:a:midnightbsd:midnightbsd:*:*:*:*:*:*:*:*
Конфигурация 2Версия до 11.4 (включая)
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
EPSS
Процентиль: 28%
0.00098
Низкий
5.5 Medium
CVSS3
4.9 Medium
CVSS2
Дефекты
CWE-787
Связанные уязвимости
github
больше 3 лет назад
A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.
EPSS
Процентиль: 28%
0.00098
Низкий
5.5 Medium
CVSS3
4.9 Medium
CVSS2
Дефекты
CWE-787