OSVDB ID: 22730 Title: FreeBSD Uninitialized Buffer Arbitrary Kernel Memory Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
FreeBSD contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a buffer allocated from the kernel stack is not completely initialized before being copied to userland, which may disclose portions of kernel memory resulting in a loss of confidentiality. |
Classification |
Location:
Local Access Required
Attack Type: Information Disclosure Impact: Loss of Confidentiality Disclosure: OSVDB Verified |
Solution |
Upgrade to version 5-STABLE or 6-STABLE, or to the RELENG_6_0 security branch dated after the correction date, as it has been reported to fix this vulnerability. In addition, FreeBSD has released a patch for some older versions. |
Products |
|
References |
|
Credit |
|
frontfree.net -