PT-2020-15846
CVE-2020-24863
·
تاريخ النشر
2020-09-03
·
تاريخ التحديث
2020-09-11
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
MidnightBSD versions prior to 1.2.7
MidnightBSD versions 1.3 through 2020-08-19
FreeBSD versions prior to 11.4
Description
A memory corruption issue was found in the kernel function
kern getfsstat() that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.Recommendations
For MidnightBSD versions prior to 1.2.7, update to version 1.2.7 or later.
For MidnightBSD versions 1.3 through 2020-08-19, apply the necessary patches or updates to fix the issue.
For FreeBSD versions prior to 11.4, update to version 11.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾