SB2016101012 - Heap-based Buffer Overflow in FreeBSD
Published: October 10, 2016 Updated: October 11, 2016
Security Bulletin ID
SB2016101012
CSH Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Heap-based Buffer Overflow (CVE-ID: N/A)
CWE-ID: CWE-122 - Heap-based Buffer Overflow
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
The vulnerability allows a remote anauthenticated user to execute arbitrary code or trigger DoS conditions on the target system.
The weakness is due to improper input validation by the bspatch utility. By installing or tricking the victim to upload a specially crafted patch file attackers can cause a heap overflow that may lead to system crash. Besides, a malicious user with elevated privileges can trigger arbitrary code execution on the vulnerable system.
Successful exploitation of the vulnerability allows remote attackers to compromise the system completely.
The weakness is due to improper input validation by the bspatch utility. By installing or tricking the victim to upload a specially crafted patch file attackers can cause a heap overflow that may lead to system crash. Besides, a malicious user with elevated privileges can trigger arbitrary code execution on the vulnerable system.
Successful exploitation of the vulnerability allows remote attackers to compromise the system completely.
Remediation
Install update from vendor's website.