CVE-2022-23089 Out of bound read in elf_note_prpsinfo()

When dumping core and saving process information, procgetargv might return an sbuf which have a sbuflen of 0 or -1, which is not properly handled. An out-of-bound read can happen when user constructs a specially crafted psstring, which in turn can cause the kernel to crash...

CVE-2022-23089 Out of bound read in elf_note_prpsinfo()

When dumping core and saving process information, procgetargv might return an sbuf which have a sbuflen of 0 or -1, which is not properly handled. An out-of-bound read can happen when user constructs a specially crafted psstring, which in turn can cause the kernel to crash...

CVE-2022-23089

CVE-2022-23089 affects FreeBSD kernels where, during core dump handling, proc_getargv() can return an sbuf with sbuf_len() 0 or -1, which is not properly handled. This can enable an out-of-bounds read when a user constructs a specially crafted ps_string, potentially crashing the kernel. Documente...

FreeBSD : FreeBSD -- Out of bound read in elf_note_prpsinfo() (5028c1ae-1890-11ed-9b22-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5028c1ae-1890-11ed-9b22-002590c1f29c advisory. - When dumping core and saving process information, procgetargv might return an sbuf which have a sbufl...