3.3

CVE-2024-25941

jail(2) information leak

The jail(2) system call has not limited a visiblity of allocated TTYs (the kern.ttys sysctl).  This gives rise to an information leak about processes outside the current jail.

Attacker can get information about TTYs allocated on the host or in other jails.  Effectively, the information printed by "pstat -t" may be leaked.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version < 13.2
Freebsd ≫ Freebsd Version 13.2 Update p1
Freebsd ≫ Freebsd Version 13.2 Update p2
Freebsd ≫ Freebsd Version 13.2 Update p3
Freebsd ≫ Freebsd Version 13.2 Update p4
Freebsd ≫ Freebsd Version 13.2 Update p5
Freebsd ≫ Freebsd Version 13.2 Update p6
Freebsd ≫ Freebsd Version 13.2 Update p7
Freebsd ≫ Freebsd Version 13.2 Update p8
Freebsd ≫ Freebsd Version 13.2 Update p9
Freebsd ≫ Freebsd Version 14.0 Update beta5
Freebsd ≫ Freebsd Version 14.0 Update p1
Freebsd ≫ Freebsd Version 14.0 Update p2
Freebsd ≫ Freebsd Version 14.0 Update p3
Freebsd ≫ Freebsd Version 14.0 Update p4
Freebsd ≫ Freebsd Version 14.0 Update rc3
Freebsd ≫ Freebsd Version 14.0 Update rc4-p1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.077
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://security.freebsd.org/advisories/FreeBSD-SA-24:02.tty.asc
Vendor Advisory
https://security.netapp.com/advisory/ntap-20240510-0003/
Third Party Advisory