101 matches found
freebsd_kernel_hacking
FreeBSD Kernel Hacking Exercises from Joseph Kong's Designing BSD Rootkits, updated for FreeBSD 11/12. Even though the book is over 10 years old, it's highly recommended as it's quite a challenge to update the source code provided in the book to work on modern releases. Further Resources:...
FreeBSD -- Kernel use-after-free via tty ioctls
Problem Description: The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling proces...
CVE-2026-58083
While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was complete. The copy routine did not account for this and could enqueue the new knote a second time, corrupting the active list. In addition,...
FreeBSD : FreeBSD-kernel -- Kernel stack disclosure in 32-bit compatibility support (43f9ca02-74e3-11f1-958d-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 43f9ca02-74e3-11f1-958d-bc241121aa0a advisory. The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It...
FreeBSD Security Advisory - FreeBSD-SA-26:13.exec
FreeBSD Security Advisory - An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve2 argument buffers...
PT-2026-21884
Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description The rtsock msg buffer function copies sockaddr structures into a sockaddr storage structure on the stack without proper validation of the source sockaddr length. This can lead to a 127-byte...
EUVD-2018-18664
Malware in sbrugna...
EUVD-2009-2643
Malware in sbrugna...
EUVD-2000-0374
Malware in sbrugna...
EUVD-2014-3810
Malware in sbrugna...
EUVD-2008-3876
Malware in sbrugna...
EUVD-2006-0387
Malware in sbrugna...
EUVD-2007-3706
Malware in sbrugna...
EUVD-2019-15187
Malware in sbrugna...
EUVD-2011-4014
Malware in sbrugna...
EUVD-2006-0386
Malware in sbrugna...
EUVD-2016-2975
Malware in sbrugna...
EUVD-2007-3705
Malware in sbrugna...