112 matches found
freebsd_kernel_hacking
FreeBSD 커널 해킹 Joseph Kong의 Designing BSD Rootkits에 나온 실습 과제들을 FreeBSD 11/12에 맞게 업데이트했습니다. 이 책은 10년 이상 지났지만, 현대 릴리스에서 작동하도록 책에 제공된 소스 코드를 업데이트하는 것이 상당히 어려운 작업이므로 적극 추천합니다. 추가 자료: learning-kernelhacking...
FreeBSD : FreeBSD -- Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl (226751fb-a0fe-11f1-ae1f-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 226751fb-a0fe-11f1-ae1f-bc241121aa0a advisory. The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking ...
FreeBSD -- Kernel use-after-free via tty ioctls
Problem Description: The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling proces...
CVE-2026-58083
While the kernel was copying knotes during fork, a knote with a timer-based filter could fire and be enqueued on the kqueue's active list before the copy was complete. The copy routine did not account for this and could enqueue the new knote a second time, corrupting the active list. In addition,...
The vulnerability of the dsp_mmap_single() function in the operating system kernel of FreeBSD allows a hacker to cause a service failure.
The vulnerability of the dspmmapsingle function in the operating system kernels of FreeBSD is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
FreeBSD : FreeBSD-kernel -- Kernel stack disclosure in 32-bit compatibility support (43f9ca02-74e3-11f1-958d-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 43f9ca02-74e3-11f1-958d-bc241121aa0a advisory. The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It...
PT-2026-70015
Name of the Vulnerable Software and Affected Versions FreeBSD kernel affected versions not specified Description The kernel functions implementing unlinkat2 and funlinkat2 fail to pass the AT RESOLVE BENEATH flag to the underlying path lookup process. Although the flag is validated, it is silentl...
PT-2026-71932
Name of the Vulnerable Software and Affected Versions FreeBSD kernel affected versions not specified Description When auditing a system call executed via ptracePT SC REMOTE, the kernel passes the return value of an internal setup function to AUDIT SYSCALL EXIT instead of the actual result of the...
FreeBSD Security Advisory - FreeBSD-SA-26:13.exec
FreeBSD Security Advisory - An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve2 argument buffers...
The vulnerability of the FreeBSD operating system’s kernel, related to the use of an erroneous operator, allows a hacker to gain unauthorized access to protected information.
The vulnerability of the FreeBSD operating system’s kernel is related to the use of an erroneous operator. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the FreeBSD operating system’s kernel, which allows a hacker to gain access to the file system
The vulnerability of FreeBSD operating systems lies in the insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to gain access to the file system...
The vulnerability of the rtsock_msg_buffer() function in the operating system kernel of FreeBSD, which allows a hacker to cause a service failure
The vulnerability of the rtsockmsgbuffer function in the kernel of the FreeBSD operating system is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
PT-2026-21884
Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description The rtsock msg buffer function copies sockaddr structures into a sockaddr storage structure on the stack without proper validation of the source sockaddr length. This can lead to a 127-byte...
The vulnerability of the FreeBSD operating system’s kernel, related to buffer overflows in the stack, allows an attacker to execute arbitrary code.
The vulnerability of the FreeBSD operating system’s kernel implementation is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2018-18664
Malware in sbrugna...
EUVD-2008-3876
Malware in sbrugna...
EUVD-2009-2643
Malware in sbrugna...
EUVD-2014-3810
Malware in sbrugna...