7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
0.0004 Low
EPSS
Percentile
9.0%
Problem Description:
The syscall checked only for the CAP_READ and CAP_WRITE
capabilities on the input and output file descriptors, respectively.
Using an offset is logically equivalent to seeking, and the syscall
must additionally require the CAP_SEEK capability.
Impact:
A sandboxed process with only read or write but no seek capability
on a file descriptor may be able to read data from or write data
to an arbitrary location within the file corresponding to that file
descriptor.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
FreeBSD | any | noarch | freebsd-kernel | = 13.2 | UNKNOWN |
FreeBSD | any | noarch | freebsd-kernel | < 13.2_4 | UNKNOWN |
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
0.0004 Low
EPSS
Percentile
9.0%