FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-01-25 14:24:43 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
46a29f83-cb47-11ee-b609-002590c1f29cFreeBSD -- jail(2) information leak

Problem Description:

The jail(2) system call has not limited a visiblity of allocated TTYs (the kern.ttys sysctl). This gives rise to an information leak about processes outside the current jail.

Impact:

Attacker can get information about TTYs allocated on the host or in other jails. Effectively, the information printed by "pstat -t" may be leaked.


Discovery 2024-02-14
Entry 2024-02-14
FreeBSD-kernel
>= 14.0 lt 14.0_5

>= 13.2 lt 13.2_10

CVE-2024-25941
SA-24:02.tty