← Vissza

news.bsdnet.hu

12 új FreeBSD SA - 2 full control, LPE, RCE, DoS info leak stb.

HUP 2026-06-10 06:35
Címkék FreeBSD 2026-06-09 FreeBSD-SA-26:36.ldns - Without these checks, an off-path attacker who cannot observe the query can forge UDP responses that ldns will accept as genuine. 2026-06-09 FreeBSD-SA-26:35.openssl - Security impact ranges from a Denial of Service to a potential remote code execution .  See the OpenSSL advisory for specific details. 2026-06-09 FreeBSD-SA-26:34.vt - An unprivileged local user with access to a vt(4) device can trigger an out-of-bounds write in the kernel, potentially escalating privileges. 2026-06-09 FreeBSD-SA-26:33.unbound - The issues range from Denial of Service (DoS) through resource exhaustion or crashes to possible remote code execution during DNSSEC validation. 2026-06-09 FreeBSD-SA-26:32.elf - An unprivileged local user can disable ASLR 2026-06-09 FreeBSD-SA-26:31.arm64 - Consequently this may allow software to write to memory owned by a higher exception level, possibly allowing software to escalate privilege to that higher exception level . 2026-06-09 FreeBSD-SA-26:30.linux - An unprivileged local user can inject a shared library via LD_PRELOAD into a set-user-ID or set-group-ID Linux binary, gaining the privileges of that binary. 2026-06-09 FreeBSD-SA-26:29.ip6_multicast - An unprivileged local user can exploit this use-after-free to escalate privileges. 2026-06-09 FreeBSD-SA-26:28.capsicum - This could be any process running as the same user, or any process, for a superuser sandboxed process . 2026-06-09 FreeBSD-SA-26:27.sound - an unprivileged local user to read and write kernel memory, which can be used to escalate privileges, potentially gaining full control of the affected system 2026-06-09 FreeBSD-SA-26:26.ktls -  By overwriting a setuid binary or other trusted file, a local user can escalate privileges, potentially gaining full control of the affected system. 2026-06-09 FreeBSD-SA-26:25.thr - An unprivileged local user [...] allows an unprivileged local user who knows or can guess a target's process and thread IDs to send any signal to a process they would not normally be permitted [...] An attacker can stop or terminate arbitrary processes , including critical system daemons A hozzászóláshoz be kell jelentkezni 12 megtekintés
Eredeti cikk megtekintése →