Thomas Barabosch

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions prior to 11.2-STABLE(r338983) FreeBSD versions prior to 11.2-RELEASE-p4 FreeBSD versions prior to 11.1-RELEASE-p15 FreeBSD versions prior to 10.4-STABLE(r338984) FreeBSD versions prior to 10.4-RELEASE-p13 **Description** The issue allows unprivileged authenticated local users to access small amounts of privileged kernel data due to insufficient initialization of memory copied to userland in the getcontext and swapcontext system calls. This may disclose small amounts of kernel memory to userland processes. **Recommendations** For versions prior to 11.2-STABLE(r338983), update to 11.2-STABLE(r338983) or later. For versions prior to 11.2-RELEASE-p4, update to 11.2-RELEASE-p4 or later. For versions prior to 11.1-RELEASE-p15, update to 11.1-RELEASE-p15 or later. For versions prior to 10.4-STABLE(r338984), update to 10.4-STABLE(r338984) or later. For versions prior to 10.4-RELEASE-p13, update to 10.4-RELEASE-p13 or later.

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions prior to 11.1-STABLE FreeBSD versions prior to 11.2-RELEASE-p3 FreeBSD versions prior to 11.1-RELEASE-p14 FreeBSD versions prior to 10.4-STABLE FreeBSD versions prior to 10.4-RELEASE-p12 **Description** The issue is caused by insufficient validation in the ELF header parser, which could allow a malicious ELF binary to cause a kernel crash or disclose kernel memory. This could potentially impact the confidentiality of protected information or cause a denial of service. **Recommendations** For versions prior to 11.1-STABLE, update to 11.1-STABLE or later. For versions prior to 11.2-RELEASE-p3, update to 11.2-RELEASE-p3 or later. For versions prior to 11.1-RELEASE-p14, update to 11.1-RELEASE-p14 or later. For versions prior to 10.4-STABLE, update to 10.4-STABLE or later. For versions prior to 10.4-RELEASE-p12, update to 10.4-RELEASE-p12 or later.

**Name of the Vulnerable Software and Affected Versions** OpenBSD versions 6.2 through 6.3 **Description** The issue is related to incorrect I/O port access control on the i386 architecture, which can cause a Local Denial of Service (system crash) due to the `tss alloc` function in `sys/arch/i386/i386/gdt.c`. **Recommendations** For OpenBSD versions 6.2 and 6.3, consider applying a patch or fix that corrects the I/O port access control issue in the `tss alloc` function to prevent system crashes.