In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the __sflush() stdio function in libc does not correctly update FILE objectsβ write space members for write-buffered streams when the write(2) system call returns an error. Β Depending on the nature of an application that calls libcβs stdio functions and the presence of errors returned from the write(2) system call (or an overridden stdio write routine) a heap buffer overflow may occur. Such overflows may lead to data corruption or the execution of arbitrary code at the privilege level of the calling program.
[
{
"defaultStatus": "unknown",
"modules": [
"libc"
],
"product": "FreeBSD",
"vendor": "FreeBSD",
"versions": [
{
"lessThan": "p7",
"status": "affected",
"version": "12.4-RELEASE",
"versionType": "release"
},
{
"lessThan": "p5",
"status": "affected",
"version": "13.2-RELEASE",
"versionType": "release"
}
]
}
]