{"id":119753,"date":"2024-09-10T09:43:17","date_gmt":"2024-09-10T07:43:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-vo-freebsd-pozvolyayushhie-povysit-svoi-privilegii-ili-obojti-izolyacziyu-gostevoj-sistemy"},"modified":"2024-09-10T09:43:17","modified_gmt":"2024-09-10T07:43:17","slug":"uyazvimosti-vo-freebsd-pozvolyayushhie-povysit-svoi-privilegii-ili-obojti-izolyacziyu-gostevoj-sistemy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/uyazvimosti-vo-freebsd-pozvolyayushhie-povysit-svoi-privilegii-ili-obojti-izolyacziyu-gostevoj-sistemy","title":{"rendered":"Vulnerabilities in FreeBSD that allow for privilege escalation or bypassing guest system isolation","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Several vulnerabilities in FreeBSD have been fixed that allowed a local user to escalate their privileges, execute code in the kernel context, or escape from an isolated environment: <\/p>\n
\n
CVE-2024-43102 \u2014 a race condition in the implementation of the system call _umtx_op can be exploited to access an already freed memory area (Use-After-Free) by concurrently sending multiple UMTX_SHM_DESTROY subrequests. This vulnerability potentially allows bypassing the isolation mechanism constraints of Capsicum or achieving code execution at the kernel level. The vulnerability has been assigned the highest danger level (10 out of 10). The issue has been resolved in updates 14.1-RELEASE-p4, 14.0-RELEASE-p10 and 13.3-RELEASE-p6.\n
CVE-2024-45287, CVE-2024-45288 \u2014 vulnerabilities in the libnv library, used in both the kernel and user space for processing key\/value format lists. The first issue is related to an integer overflow, leading to allocating a buffer that is smaller than the amount of data being written to it. The second issue is caused by a lack of a null termination character in the last element of the array, which allows writing beyond the allocated buffer. This vulnerability can potentially be exploited for privilege escalation by overwriting memory areas in system processes or the kernel.\n
CVE-2024-32668, CVE-2024-41928, CVE-2024-8178, CVE-2024-42416, CVE-2024-43110, CVE-2024-45063 \u2014 vulnerabilities in the bhyve hypervisor that allow code execution in the process running on the host system (usually with root privileges) when manipulating within the guest system with virtual USB controller (XHCI), TPM, or ctl (SCSI emulation via CAM Target Layer) drivers.\n
CVE-2024-6119 \u2014 a vulnerability in OpenSSL that causes applications to crash when validating specially crafted X.509 certificate names specified in the otherName field. <\/ul>\n