12 új FreeBSD SA - 2 full control, LPE, RCE, DoS info leak stb.
HUP
2026-06-10 06:35
Címkék
FreeBSD
2026-06-09
FreeBSD-SA-26:36.ldns
- Without these checks, an off-path attacker who cannot observe the query
can forge UDP responses that ldns will accept as genuine.
2026-06-09
FreeBSD-SA-26:35.openssl
- Security impact ranges from a Denial of Service to a
potential remote code
execution
. See the OpenSSL advisory for specific details.
2026-06-09
FreeBSD-SA-26:34.vt
-
An unprivileged local user
with access to a vt(4) device can trigger an
out-of-bounds write in the kernel,
potentially escalating privileges.
2026-06-09
FreeBSD-SA-26:33.unbound
- The issues range from Denial of Service (DoS) through resource exhaustion or
crashes to
possible remote code execution
during DNSSEC validation.
2026-06-09
FreeBSD-SA-26:32.elf
- An unprivileged local user
can disable ASLR
2026-06-09
FreeBSD-SA-26:31.arm64
- Consequently this may allow software to write to memory owned by a higher
exception level, possibly allowing software
to escalate privilege to that
higher exception level
.
2026-06-09
FreeBSD-SA-26:30.linux
-
An unprivileged local user
can inject a shared library via LD_PRELOAD into
a set-user-ID or set-group-ID Linux binary,
gaining the privileges of that
binary.
2026-06-09
FreeBSD-SA-26:29.ip6_multicast
-
An unprivileged local user
can exploit this use-after-free
to escalate
privileges.
2026-06-09
FreeBSD-SA-26:28.capsicum
- This could be any process running as the same user, or any process, for
a
superuser sandboxed process
.
2026-06-09
FreeBSD-SA-26:27.sound
-
an unprivileged local user
to
read and write kernel memory, which can be used to escalate privileges,
potentially
gaining full control of the affected system
2026-06-09
FreeBSD-SA-26:26.ktls
- By overwriting a setuid binary or other trusted
file, a local user can escalate privileges, potentially
gaining full
control of the affected system.
2026-06-09
FreeBSD-SA-26:25.thr
- An
unprivileged local user
[...]
allows an unprivileged local user
who knows or can guess a
target's process and thread IDs
to send any signal to a process
they would
not normally be permitted [...]
An attacker can stop or terminate arbitrary processes
, including critical system daemons
A hozzászóláshoz
be kell jelentkezni
12 megtekintés