Описание
A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause.
An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to other processes or the kernel.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 12.3 (исключая)
Одно из
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.3:beta1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.3:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.3:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.3:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.3:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.3:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:beta1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:beta2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:beta3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:beta3-p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:beta4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p10:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p11:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p7:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p8:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:p9:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc5-p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.1:b1-p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.1:b2-p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.1:rc1-p1:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00044
Низкий
4 Medium
CVSS3
Дефекты
CWE-401
Связанные уязвимости
CVSS3: 4
github
почти 2 года назад
A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to other processes or the kernel.
EPSS
Процентиль: 13%
0.00044
Низкий
4 Medium
CVSS3
Дефекты
CWE-401