Skip to content
OpenAdvisories
High WID-SEC-2024-1793 4 CVEs

FreeBSD Project FreeBSD OS: Mehrere Schwachstellen

Published Aug 7, 2024 · Updated Aug 7, 2024 · de-DE

Vendor: FreeBSD Product: FreeBSD OS

Summary

Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen preiszugeben, Dateien zu verändern und beliebigen Code als root auszuführen.

Product

FreeBSD ist ein Open Source Betriebssystem aus der BSD Familie und gehört damit zu den Unix Derivaten.

Vulnerabilities 4

  • High 8.1
    CVE-2024-7589

    OpenSSH pre-authentication async signal safety issue

    A signal handler in sshd(8) may call a logging function that is not async-signal-safe. The signal handler is invoked when a client does not authenticate within the LoginGraceTime seconds (120 by default). This signal handler executes in the context of the ssh…

    FreeBSD FreeBSD
  • High 7.5
    CVE-2024-6760

    ktrace(2) fails to detach when executing a setuid binary

    A logic bug in the code which disables kernel tracing for setuid programs meant that tracing was not disabled when it should have, allowing unprivileged users to trace and inspect the behavior of setuid programs. The bug may be used by an unprivileged user to…

    FreeBSD FreeBSD
  • Medium 6.3
    CVE-2024-6640

    pf incorrectly matches different ICMPv6 states in the state table

    In ICMPv6 Neighbor Discovery (ND), the ID is always 0. When pf is configured to allow ND and block incoming Echo Requests, a crafted Echo Request packet after a Neighbor Solicitation (NS) can trigger an Echo Reply. The packet has to come from the same host as…

    FreeBSD FreeBSD
  • Medium 5.3
    CVE-2024-6759

    NFS client accepts file names containing path separators

    When mounting a remote filesystem using NFS, the kernel did not sanitize remotely provided filenames for the path separator character, "/". This allows readdir(3) and related functions to return filesystem entries with names containing additional path compone…

    FreeBSD FreeBSD

Revision history

  1. #1

    Initiale Fassung

References