FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-19 18:22:07 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
5028c1ae-1890-11ed-9b22-002590c1f29cFreeBSD -- Out of bound read in elf_note_prpsinfo()

Problem Description:

When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1, which is not properly handled.

Impact:

An out-of-bound read can happen when user constructs a specially crafted ps_string, which in turn can cause the kernel to crash.


Discovery 2022-08-09
Entry 2022-08-10
FreeBSD-kernel
ge 13.1 lt 13.1_1

ge 13.0 lt 13.0_12

ge 12.3 lt 12.3_6

CVE-2022-23089
SA-22:09.elf