CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
5.1%
The iBCS2 system call translator for statfs in NetBSD 1.5 through 1.5.3 and FreeBSD 4 up to 4.8-RELEASE-p2 and 5 up to 5.1-RELEASE-p1 allows local users to read portions of kernel memory (memory disclosure) via a large length parameter, which copies additional kernel memory into userland memory.
Vendor | Product | Version | CPE |
---|---|---|---|
freebsd | freebsd | * | cpe:2.3:o:freebsd:freebsd:*:release_p2:*:*:*:*:*:* |
freebsd | freebsd | * | cpe:2.3:o:freebsd:freebsd:*:release_p1:*:*:*:*:*:* |
freebsd | freebsd | 4.0 | cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:* |
freebsd | freebsd | 5.0 | cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:* |
netbsd | netbsd | 1.5 | cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:* |
netbsd | netbsd | 1.5.1 | cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:* |
netbsd | netbsd | 1.5.2 | cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:* |
netbsd | netbsd | 1.5.3 | cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:* |