CVE-2016-1885

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3 before p39 FreeBSD versions 10.1 before p31 FreeBSD versions 10.2 before p14

Description The issue is caused by an integer signedness error in the amd64 set ldt function, located in sys/amd64/amd64/sys machdep.c, which leads to a heap-based buffer overflow. This can be exploited by a local attacker using the i386 set ldt system call, resulting in a denial of service (kernel panic).

Recommendations For FreeBSD version 9.3, update to p39 or later. For FreeBSD version 10.1, update to p31 or later. For FreeBSD version 10.2, update to p14 or later.