DeutschShown in its original language — a full translation is planned for a future version.
FreeBSD Project FreeBSD OS: Mehrere Schwachstellen ermöglichen Privilegieneskalation und Codeausführung
view advisory published 2024-09-04
Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-8178US | high8.8 | — | ||
The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it.
Malicious software running in a guest VM that exposes vir… | ||||
| CVE-2024-45063US | high8.8 | — | ||
The function ctl_write_buffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing.
Malicious software running in a guest VM that ex… | ||||
| CVE-2024-43110US | high8.8 | — | ||
The ctl_request_sense function could expose up to three bytes of the kernel heap to userspace.
Malicious software running in a guest VM that exposes virtio_scsi can exploit the vu… | ||||
| CVE-2024-43102US | critical10.0 | — | ||
Concurrent removals of certain anonymous shared memory mappings by using the UMTX_SHM_DESTROY sub-request of UMTX_OP_SHM can lead to decreasing the reference count of the object re… | ||||
| CVE-2024-42416US | high8.8 | — | ||
The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory.
Malic… | ||||
| CVE-2024-32668US | high8.2 | — | ||
An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controlled by the caller.
A malicious, privileged software running… | ||||
| CVE-2024-45288US | — | — | ||
A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer. | ||||
| CVE-2024-45287US | high7.5 | — | ||
A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data. | ||||
| CVE-2024-41928US | — | — | ||
Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note th… | ||||
02
references
External citations — patches, advisories, analysis.
- FreeBSD Security Advisory vom 2024-09-04external
- FreeBSD Security Advisory vom 2024-09-04external
- FreeBSD Security Advisory vom 2024-09-04external
- FreeBSD Security Advisory vom 2024-09-04external
- FreeBSD Security Advisory FREEBSD-SA-24:16.LIBNV vom 2024-09-19external
- NetApp Security Advisory NTAP-20240916-0001 vom 2024-09-16external
- NetApp Security Advisory NTAP-20240920-0008 vom 2024-09-20external
- NetApp Security Advisory NTAP-20240926-0010 vom 2024-09-26external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan