WID-SEC-W-2022-2195

DeutschShown in its original language — a full translation is planned for a future version.

FreeBSD Project FreeBSD OS: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes

view advisory published 2022-11-29

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in FreeBSD Project FreeBSD OS ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-23093US	—	2.40% (84th)	Exploit	2024-02-15
ping reads raw IP packets from the network to process responses in the pr_pack() function. As part of processing a response ping has to reconstruct the IP header, the ICMP header…

references

External citations — patches, advisories, analysis.

OPNsense 22.7.9 release vom 2022-12-01external
FreeBSD Security Advisory vom 2022-11-29external
NetApp Security Advisory NTAP-20221209-0009 vom 2022-12-09external
WID-SEC-W-2022-2195 - CSAF Versionself
WID-SEC-2022-2195 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan