EUVD-2018-8930

Malware in sbrugna...

CVE-2018-17155: Exposure of Sensitive Information to an Unauthorized Actor

In FreeBSD before 11.2-STABLEr338983, 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLEr338984, and 10.4-RELEASE-p13, due to insufficient initialization of memory copied to userland in the getcontext and swapcontext system calls, small amounts of kernel memory may be disclosed to userland processes...

Patching non-exported, non-system-service kernel functions

Patching non-exported, non-system-service kernel functions KAV's kernel patching is not limited to just system services, however. One of the most dangerous hooks that KAV installs is one in the middle of the nt!SwapContext function, which is neither exported nor a system service and thus has no...