{"id":119753,"date":"2024-09-10T09:43:17","date_gmt":"2024-09-10T07:43:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-vo-freebsd-pozvolyayushhie-povysit-svoi-privilegii-ili-obojti-izolyacziyu-gostevoj-sistemy"},"modified":"2024-09-10T09:43:17","modified_gmt":"2024-09-10T07:43:17","slug":"uyazvimosti-vo-freebsd-pozvolyayushhie-povysit-svoi-privilegii-ili-obojti-izolyacziyu-gostevoj-sistemy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimosti-vo-freebsd-pozvolyayushhie-povysit-svoi-privilegii-ili-obojti-izolyacziyu-gostevoj-sistemy","title":{"rendered":"S\u00e5rbarheder i FreeBSD, der muligg\u00f8r forh\u00f8jelse af privilegier eller omg\u00e5else af isolation af g\u00e6stesystemet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
I FreeBSD er der rettet flere s\u00e5rbarheder, som g\u00f8r det muligt for en lokal bruger at h\u00e6ve sine rettigheder, k\u00f8re kode i kernekonteksten eller bryde ud af et isoleret milj\u00f8: <\/p>\n
\n
CVE-2024-43102 \u2014 en race condition in the implementation of the system call _umtx_op can be used to access a previously released memory area (Use-After-Free) through the simultaneous submission of multiple UMTX_SHM_DESTROY subrequests. The vulnerability could potentially bypass the isolation mechanism of Capsicum or achieve execution of code at the kernel level. The vulnerability has been assigned the highest danger level (10 out of 10). The issue has been resolved in updates 14.1-RELEASE-p4, 14.0-RELEASE-p10, and 13.3-RELEASE-p6.\n
CVE-2024-45287, CVE-2024-45288 \u2014 vulnerabilities in the libnv library, used in both the kernel and user space for processing key\/value formatted lists. The first issue is related to an integer overflow, leading to the allocation of a buffer that is smaller than the data block being written to the buffer. The second issue arises from the absence of a terminating null character in the last element of the array, which leads to the possibility of writing beyond the allocated buffer. The vulnerability could potentially be exploited to escalate privileges by overwriting memory areas in system processes or the kernel.\n
CVE-2024-32668, CVE-2024-41928, CVE-2024-8178, CVE-2024-42416, CVE-2024-43110, CVE-2024-45063 \u2014 vulnerabilities in the bhyve hypervisor that allow for code execution in a process running on the host system (usually with root privileges) when manipulating within the guest system with virtual USB controller (XHCI), TPM, or ctl (SCSI emulation through CAM Target Layer) drivers.\n
CVE-2024-6119 \u2014 a vulnerability in OpenSSL that leads to application crashes when checking specially crafted X.509 certificate names specified in the otherName field. <\/ul>\n