Description
The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates.
References
- 12722 third-party-advisory
- VU#969078 third-party-advisory
- 11321 vdb-entry
- syscons-consscrshot-info-disclosure(17584) vdb-entry