#VU9342 Improper access control in FreeBSD - CVE-2017-1087 

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU9342

#VU9342 Improper access control in FreeBSD - CVE-2017-1087

Published: November 16, 2017 / Updated: November 16, 2017


Vulnerability identifier: #VU9342
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2017-1087
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability: No public exploit available
Vulnerable software:
FreeBSD
Software vendor:
FreeBSD Foundation

Description

The vulnerability allows a local user to access otherwise restricted information.

The vulnerability exists due to an error in implementation of POSIX shared memory, intended for realtime inter-process communication by sharing a memory area through the use of a named path. Named paths are globally scoped, meaning a process located in one jail can read and modify the content of POSIX shared memory objects created by a process in another jail or the host system.

A malicious user that has access to a jailed system is able to abuse shared memory by injecting malicious content in the shared memory region.  This memory region might be executed by applications trusting the shared memory, like Squid.

Successful exploitation of the vulnerability may allow an attacker to perform a denial of service (DoS) attack or escalate privileges on the system.

Remediation


External links