Skip to content
OpenAdvisories
Low WID-SEC-2024-0364 2 CVEs

FreeBSD Project FreeBSD OS: Schwachstelle ermöglicht Offenlegung von Informationen

Published Feb 13, 2024 · Updated Feb 13, 2024 · de-DE

Vendor: FreeBSD Product: FreeBSD OS

Summary

Ein lokaler Angreifer kann eine Schwachstelle in FreeBSD Project FreeBSD OS ausnutzen, um Informationen offenzulegen.

Product

FreeBSD ist ein Open Source Betriebssystem aus der BSD Familie und gehört damit zu den Unix Derivaten.

Vulnerabilities 2

  • Medium 6.3
    CVE-2024-25940

    bhyveload(8) host file access

    `bhyveload -h <host-path>` may be used to grant loader access to the <host-path> directory tree on the host. Affected versions of bhyveload(8) do not make any attempt to restrict loader's access to <host-path>, allowing the loader to read any file the host us…

    FreeBSD FreeBSD
  • Low 3.3
    CVE-2024-25941

    jail(2) information leak

    The jail(2) system call has not limited a visiblity of allocated TTYs (the kern.ttys sysctl). This gives rise to an information leak about processes outside the current jail. Attacker can get information about TTYs allocated on the host or in other jails. Eff…

    FreeBSD FreeBSD

Revision history

  1. #1

    Initiale Fassung

References