Lucene search

K
freebsdFreeBSD34A3F9B5-DAB3-11E7-B5AF-A4BADB2F4699
HistoryNov 15, 2017 - 12:00 a.m.

FreeBSD -- Kernel data leak via ptrace(PT_LWPINFO)

2017-11-1500:00:00
vuxml.freebsd.org
7

0.001 Low

EPSS

Percentile

19.3%

Problem Description:
Not all information in the struct ptrace_lwpinfo is
relevant for the state of any thread, and the kernel does
not fill the irrelevant bytes or short strings. Since the
structure filled by the kernel is allocated on the kernel
stack and copied to userspace, a leak of information of the
kernel stack of the thread is possible from the debugger.
Impact:
Some bytes from the kernel stack of the thread using
ptrace(PT_LWPINFO) call can be observed in userspace.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd-kernel= 11.1UNKNOWN
FreeBSDanynoarchfreebsd-kernel< 11.1_4UNKNOWN

0.001 Low

EPSS

Percentile

19.3%

Related for 34A3F9B5-DAB3-11E7-B5AF-A4BADB2F4699