Skip to content
OpenAdvisories
Unscored CVE-2018-17155 EUVD-2018-8930GHSA-jghc-cwfr-7hf7

In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984), and 10.4-RELEASE-p13, due to insufficient …

Published Sep 28, 2018 · Updated Sep 16, 2024 · Assigned by freebsd

Description

In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984), and 10.4-RELEASE-p13, due to insufficient initialization of memory copied to userland in the getcontext and swapcontext system calls, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts privileged kernel data.

Affected products

VendorProductAffectedFixed
FreeBSD FreeBSD 11.2 before 11.2-RELEASE-p4, 11.1 before 11.1-RELEASE-p15, 10.x before 10.4-RELEASE-p13 —

References