75 matches found
CVE-2016-1883
Removed by vendor...
CVE-2016-1880
Removed by vendor...
CVE-2016-1880
CVE-2016-1880 concerns FreeBSD’s Linux binary compatibility layer. The issue arises from a programming error in handling Linux futex robust lists, potentially allowing a local user to read portions of kernel memory and escalate privileges on affected systems. Affected: FreeBSD versions with Linux...
CVE-2016-1880: Undefined Security Weakness
The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists."...
CVE-2016-1883: Undefined Security Weakness
The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecified vectors...
Newly Discovered Mac Malware with Ancient Code Spying on Biotech Firms
Security researchers have discovered a rare piece of Mac-based espionage malware that relies on outdated coding practices but has been used in some previous real-world attacks to spy on biomedical research center computers. Dubbed Fruitfly, the malware has remained undetected for years on macOS...
FreeBSD : FreeBSD -- Linux compatibility layer incorrect futex handling (793fb19c-600a-11e6-a6c3-14dae9d210b8)
A programming error in the handling of Linux futex robust lists may result in incorrect memory locations being accessed. Impact : It is possible for a local attacker to read portions of kernel memory, which may result in a privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
FreeBSD : FreeBSD -- Linux compatibility layer setgroups(2) system call (798f63e0-600a-11e6-a6c3-14dae9d210b8)
A programming error in the Linux compatibility layer setgroups2 system call can lead to an unexpected results, such as overwriting random kernel memory contents. Impact : It is possible for a local attacker to overwrite portions of kernel memory, which may result in a privilege escalation or caus...
FreeBSD : FreeBSD -- Kernel stack disclosure in Linux compatibility layer (7c5d64dd-600a-11e6-a6c3-14dae9d210b8)
The implementation of the TIOCGSERIAL ioctl2 does not clear the output struct before copying it out to userland. The implementation of the Linux sysinfo system call does not clear the output struct before copying it out to userland. Impact : An unprivileged user can read a portion of uninitialise...
FreeBSD : FreeBSD -- Linux compatibility layer issetugid(2) system call (7ac28df1-600a-11e6-a6c3-14dae9d210b8)
A programming error in the Linux compatibility layer could cause the issetugid2 system call to return incorrect information. Impact : If an application relies on output of the issetugid2 system call and that information is incorrect, this could lead to a privilege escalation. %NASLMINLEVEL 70300 ...
FreeBSD-SA-16:20.linux
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:20.linux Security Advisory The FreeBSD Project Topic: Kernel stack disclosure in Linux compatibility layer Category: core Module: linux4 Announced: 2016-05-3...
FreeBSD -- Kernel stack disclosure in Linux compatibility layer
Problem Description: The implementation of the TIOCGSERIAL ioctl2 does not clear the output struct before copying it out to userland. The implementation of the Linux sysinfo system call does not clear the output struct before copying it out to userland. Impact: An unprivileged user can read a...
Wireless Network Security Auditing Bash Script: airgeddon
airgeddon is a living project growing day by day. This is the list of features so far: Interface mode switcher Monitor-Managed keeping selection even on interface name changing DoS over wireless networks using different methods. “DoS Pursuit mode” available to avoid AP channel hopping available...
FreeBSD-SA-16:10.linux
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:10.linux Security Advisory The FreeBSD Project Topic: Linux compatibility layer issetugid2 system call vulnerability Category: core Module: kernel Announced:...
FreeBSD -- Linux compatibility layer issetugid(2) system call
Problem Description: A programming error in the Linux compatibility layer could cause the issetugid2 system call to return incorrect information. Impact: If an application relies on output of the issetugid2 system call and that information is incorrect, this could lead to a privilege escalation...
FreeBSD -- Linux compatibility layer setgroups(2) system call
Problem Description: A programming error in the Linux compatibility layer setgroups2 system call can lead to an unexpected results, such as overwriting random kernel memory contents. Impact: It is possible for a local attacker to overwrite portions of kernel memory, which may result in a privileg...
FreeBSD-SA-16:03.linux
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:03.linux Security Advisory The FreeBSD Project Topic: Linux compatibility layer incorrect futex handling Category: core Module: kernel Announced: 2016-01-14...
FreeBSD-SA-16:04.linux
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:04.linux Security Advisory The FreeBSD Project Topic: Linux compatibility layer setgroups2 system call vulnerability Category: core Module: kernel Announced:...
FreeBSD privilege escalation
Kernel memory overwrite via Linux compatibility subsystem...
FreeBSD : FreeBSD -- Linux compatibility layer input validation error (5536c8e4-36b3-11e2-a633-902b343deec9)
Problem description : A programming error in the handling of some Linux system calls may result in memory locations being accessed without proper validation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...