跳转到帖子

FreeBSD: VID-8FB61D94-771B-11EF-9A62-002590C1F29C (CVE-2024-6760): FreeBSD -- ktrace(2) fails to detach when executing a setuid binary

recommended_posts

发布于
  • Members

FreeBSD: VID-8FB61D94-771B-11EF-9A62-002590C1F29C (CVE-2024-6760): FreeBSD -- ktrace(2) fails to detach when executing a setuid binary

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:C/I:N/A:N)
Published
08/07/2024
Created
09/24/2024
Added
09/22/2024
Modified
01/28/2025

Description

A logic bug in the code which disables kernel tracing for setuid programs meant that tracing was not disabled when it should have, allowing unprivileged users to trace and inspect the behavior of setuid programs.

The bug may be used by an unprivileged user to read the contents of files to which they would not otherwise have access, such as the local password database.

Solution(s)

  • freebsd-upgrade-base-13_3-release-p5
  • freebsd-upgrade-base-14_0-release-p9
  • freebsd-upgrade-base-14_1-release-p3

References

  • CVE-2024-6760
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…