Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand herbeizuführen.
Product
FreeBSD ist ein Open Source Betriebssystem aus der BSD Familie und gehört damit zu den Unix Derivaten.
Vulnerabilities 2
-
High 7.5
Jail chroot escape via fd exchange with a different jail
If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the two jail root directories is an ancestor of the other, jailed processes may nonetheless be able to access a shared directory via a nullfs mount, if the admin…
-
High 7.5
Local DoS and possible privilege escalation via routing sockets
The rtsock_msg_buffer() function serializes routing information into a buffer. As a part of this, it copies sockaddr structures into a sockaddr_storage structure on the stack. It assumes that the source sockaddr length field had already been validated, but th…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-10335, EUVD-2026-10334, EUVD-2025-208410, EUVD-2025-208409
-
#1
Initiale Fassung
References
-
FreeBSD Security Advisory vom 2026-02-24
https://security.FreeBSD.org/advisories/FreeBSD-SA-26:04.jail.asc
-
FreeBSD Security Advisory vom 2026-02-24
https://security.FreeBSD.org/advisories/FreeBSD-SA-26:05.route.asc