8.2

CVE-2022-23085

Potential jail escape vulnerabilities in netmap

A user-provided integer option was passed to nmreq_copyin() without checking if it would overflow.  This insufficient bounds checking could lead to kernel memory corruption.

On systems configured to include netmap in their devfs_ruleset, a privileged process running in a jail can affect the host environment.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version >= 12.0 < 12.3
Freebsd ≫ Freebsd Version 12.3 Update -
Freebsd ≫ Freebsd Version 12.3 Update p1
Freebsd ≫ Freebsd Version 12.3 Update p2
Freebsd ≫ Freebsd Version 12.3 Update p3
Freebsd ≫ Freebsd Version 12.3 Update p4
Freebsd ≫ Freebsd Version 13.0 Update -
Freebsd ≫ Freebsd Version 13.0 Update beta1
Freebsd ≫ Freebsd Version 13.0 Update beta2
Freebsd ≫ Freebsd Version 13.0 Update beta3
Freebsd ≫ Freebsd Version 13.0 Update beta3-p1
Freebsd ≫ Freebsd Version 13.0 Update beta4
Freebsd ≫ Freebsd Version 13.0 Update p1
Freebsd ≫ Freebsd Version 13.0 Update p10
Freebsd ≫ Freebsd Version 13.0 Update p2
Freebsd ≫ Freebsd Version 13.0 Update p3
Freebsd ≫ Freebsd Version 13.0 Update p4
Freebsd ≫ Freebsd Version 13.0 Update p5
Freebsd ≫ Freebsd Version 13.0 Update p6
Freebsd ≫ Freebsd Version 13.0 Update p7
Freebsd ≫ Freebsd Version 13.0 Update p8
Freebsd ≫ Freebsd Version 13.0 Update p9
Freebsd ≫ Freebsd Version 13.0 Update rc1
Freebsd ≫ Freebsd Version 13.0 Update rc2
Freebsd ≫ Freebsd Version 13.0 Update rc3
Freebsd ≫ Freebsd Version 13.0 Update rc4
Freebsd ≫ Freebsd Version 13.0 Update rc5
Freebsd ≫ Freebsd Version 13.0 Update rc5-p1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.382
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.2 1.5 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://security.freebsd.org/advisories/FreeBSD-SA-22:04.netmap.asc
Vendor Advisory
https://security.netapp.com/advisory/ntap-20240322-0004/
Third Party Advisory