Ed Maste

**Name of the Vulnerable Software and Affected Versions** FreeBSD (affected versions not specified) **Description** The implementation of the `kern sigqueue()` function failed to include a capability mode check. This allows a process operating in Capsicum capability mode—a security framework that restricts process privileges—to use the `sigqueue(2)` system call to send signals to any process it would normally be able to signal under standard Unix permissions. Consequently, a compromised sandboxed process can bypass sandbox restrictions to interfere with other processes, such as by sending SIGKILL or SIGSTOP signals. This impact extends to any process running under the same user or any process on the system if the sandboxed process has superuser privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** The `CONS HISTORY` ioctl handler fails to properly validate the requested history size. Providing a large value leads to an integer overflow during the buffer size calculation, which results in a heap allocation smaller than required. This allows an unprivileged local user with access to a vt(4) device to trigger an out-of-bounds write in the kernel, which could lead to privilege escalation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.