Lucene search

K
cveFreebsdCVE-2021-29632
HistoryJan 18, 2022 - 5:15 p.m.

CVE-2021-29632

2022-01-1817:15:08
freebsd
web.nvd.nist.gov
42
cve
2021
29632
freebsd
security
vulnerability
memory corruption
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

34.3%

In FreeBSD 13.0-STABLE before n247428-9352de39c3dc, 12.2-STABLE before r370674, 13.0-RELEASE before p6, and 12.2-RELEASE before p12, certain conditions involving use of the highlight buffer while text is scrolling on the console, console data may overwrite data structures associated with the system console or other kernel memory.

Affected configurations

Nvd
Node
freebsdfreebsdMatch12.2-
OR
freebsdfreebsdMatch12.2beta1-p1
OR
freebsdfreebsdMatch12.2p1
OR
freebsdfreebsdMatch12.2p10
OR
freebsdfreebsdMatch12.2p11
OR
freebsdfreebsdMatch12.2p2
OR
freebsdfreebsdMatch12.2p3
OR
freebsdfreebsdMatch12.2p4
OR
freebsdfreebsdMatch12.2p5
OR
freebsdfreebsdMatch12.2p6
OR
freebsdfreebsdMatch12.2p7
OR
freebsdfreebsdMatch12.2p8
OR
freebsdfreebsdMatch12.2p9
OR
freebsdfreebsdMatch13.0-
OR
freebsdfreebsdMatch13.0beta1
OR
freebsdfreebsdMatch13.0beta2
OR
freebsdfreebsdMatch13.0beta3
OR
freebsdfreebsdMatch13.0beta3-p1
OR
freebsdfreebsdMatch13.0beta4
OR
freebsdfreebsdMatch13.0p1
OR
freebsdfreebsdMatch13.0p2
OR
freebsdfreebsdMatch13.0p3
OR
freebsdfreebsdMatch13.0p4
OR
freebsdfreebsdMatch13.0p5
OR
freebsdfreebsdMatch13.0rc1
OR
freebsdfreebsdMatch13.0rc2
OR
freebsdfreebsdMatch13.0rc3
OR
freebsdfreebsdMatch13.0rc4
OR
freebsdfreebsdMatch13.0rc5
OR
freebsdfreebsdMatch13.0rc5-p1
VendorProductVersionCPE
freebsdfreebsd12.2cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*
freebsdfreebsd12.2cpe:2.3:o:freebsd:freebsd:12.2:beta1-p1:*:*:*:*:*:*
freebsdfreebsd12.2cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*
freebsdfreebsd12.2cpe:2.3:o:freebsd:freebsd:12.2:p10:*:*:*:*:*:*
freebsdfreebsd12.2cpe:2.3:o:freebsd:freebsd:12.2:p11:*:*:*:*:*:*
freebsdfreebsd12.2cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*
freebsdfreebsd12.2cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:*
freebsdfreebsd12.2cpe:2.3:o:freebsd:freebsd:12.2:p4:*:*:*:*:*:*
freebsdfreebsd12.2cpe:2.3:o:freebsd:freebsd:12.2:p5:*:*:*:*:*:*
freebsdfreebsd12.2cpe:2.3:o:freebsd:freebsd:12.2:p6:*:*:*:*:*:*
Rows per page:
1-10 of 301

CNA Affected

[
  {
    "product": "FreeBSD",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FreeBSD 13.0-RELEASE before p6, 12.2-RELEASE before p12"
      }
    ]
  }
]

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

34.3%