Lucene search

K
freebsdFreeBSD7A4F2ACA-9D40-11DA-8C1D-000E0C2E438A
HistoryJan 25, 2006 - 12:00 a.m.

FreeBSD -- Local kernel memory disclosure

2006-01-2500:00:00
vuxml.freebsd.org
12

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%

Problem description:
A buffer allocated from the kernel stack may not be completely
initialized before being copied to userland. [CVE-2006-0379]
A logic error in computing a buffer length may allow too much
data to be copied into userland. [CVE-2006-0380]
Impact:
Portions of kernel memory may be disclosed to local users.
Such memory might contain sensitive information, such as
portions of the file cache or terminal buffers. This
information might be directly useful, or it might be
leveraged to obtain elevated privileges in some way. For
example, a terminal buffer might include a user-entered
password.
Workaround:
No workaround is available.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 6.0UNKNOWN
FreeBSDanynoarchfreebsd< 6.0_4UNKNOWN

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.3%

Related for 7A4F2ACA-9D40-11DA-8C1D-000E0C2E438A