Lucene search
GoogleOSV:DSA-2508-1HistoryJul 22, 2012 - 12:00 a.m.
kfreebsd-8 - privilege escalation
2012-07-2200:00:00
Google
osv.dev
13
0.001 Low
EPSS
Percentile
23.0%
Rafal Wojtczuk from Bromium discovered that FreeBSD wasn’t handling correctly
uncanonical return addresses on Intel amd64 CPUs, allowing privilege escalation
to kernel for local users.
For the stable distribution (squeeze), this problem has been fixed in
version 8.1+dfsg-8+squeeze3.
For the testing distribution (wheezy), this problem has been fixed in
version 8.3-4.
For the unstable distribution (sid), this problem has been fixed in
version 8.3-4.
We recommend that you upgrade your kfreebsd-8 packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kfreebsd-8 | eq | 8.1+dfsg-7.1 | |
| kfreebsd-8 | eq | 8.1+dfsg-8+squeeze2 | |
| kfreebsd-8 | eq | 8.1+dfsg-8+squeeze1 | |
| kfreebsd-8 | eq | 8.1+dfsg-8 |
References
Related
canvas
canvas
Immunity Canvas: SYSRET
2012-06-12 22:55:00
Immunity Canvas: MS12_042
2012-06-12 18:55:01
openvas
openvas
FreeBSD Ports: FreeBSD
2012-08-10 00:00:00
FreeBSD Ports: FreeBSD
2012-08-10 00:00:00
Debian Security Advisory DSA 2508-1 (kfreebsd-8)
2012-08-10 00:00:00
debian
debian
[SECURITY] [DSA 2508-1] kfreebsd-8 security update
2012-07-22 12:21:26
[SECURITY] [DSA 2501-1] xen security update
2012-06-24 15:22:35
freebsd
freebsd
FreeBSD -- Privilege escalation when returning from kernel
2012-06-12 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-12:04.sysret
2012-06-12 00:00:00
cve
cve
CVE-2012-0217
2012-06-12 22:55:01
CVE-2012-2934
2012-12-03 21:55:01
securityvulns
securityvulns
CVE-2012-0217
2012-06-13 00:00:00
FreeBSD Security Advisory FreeBSD-SA-12:04.sysret [REVISED]
2012-06-25 00:00:00
FreeBSD kernel privilege escalation
2012-06-25 00:00:00
nessus
nessus
Debian DSA-2508-1 : kfreebsd-8 - privilege escalation
2012-07-23 00:00:00
FreeBSD : FreeBSD -- Privilege escalation when returning from kernel (aed44c4e-c067-11e1-b5e0-000c299b62e1)
2012-06-28 00:00:00
OracleVM 2.2 : xen (OVMSA-2012-0022)
2014-11-26 00:00:00
packetstorm
packetstorm
FreeBSD Intel SYSRET Privilege Escalation
2019-03-07 00:00:00
debiancve
debiancve
CVE-2012-0217
2012-06-12 22:55:01
CVE-2012-2934
2012-12-03 21:55:01
zdt
zdt
FreeBSD - Intel SYSRET Privilege Escalation Exploit
2019-03-07 00:00:00
cvelist
cvelist
CVE-2012-0217
2012-06-12 22:00:00
CVE-2012-2934
2012-12-03 21:00:00
prion
prion
Code injection
2012-06-12 22:55:00
Code injection
2012-12-03 21:55:00
nvd
nvd
CVE-2012-0217
2012-06-12 22:55:01
CVE-2012-2934
2012-12-03 21:55:01
thn
thn
CVE-2012-0217 - Intel SYSRET FreeBSD Privilege Escalation Exploit Released
2012-07-24 20:06:00
threatpost
threatpost
Security Risks Abound in Virtualized Environments
2010-03-16 13:49:58
Virtual Machine Escape Exploit Targets Xen
2012-09-06 11:52:32
ubuntucve
ubuntucve
CVE-2012-0217
2012-06-12 00:00:00
CVE-2012-2934
2012-12-03 00:00:00
cisa
cisa
Microsoft Releases June Security Bulletin
2012-06-07 00:00:00
metasploit
metasploit
FreeBSD Intel SYSRET Privilege Escalation
2018-12-09 16:04:38
exploitdb
exploitdb
FreeBSD - Intel SYSRET Privilege Escalation (Metasploit)
2019-03-07 00:00:00
redhat
redhat
(RHSA-2012:0721) Important: kernel security update
2012-06-12 00:00:00
(RHSA-2012:0720) Important: kernel security and bug fix update
2012-06-12 00:00:00
oraclelinux
oraclelinux
centos
centos
kernel security update
2012-06-13 00:11:19
mskb
mskb
suse
suse
xen (critical)
2012-07-18 15:08:32
Security update for Xen (critical)
2012-06-12 23:08:27
osv
osv
xen - several
2012-06-24 00:00:00
cert
cert
fedora
fedora
[SECURITY] Fedora 17 Update: xen-4.1.2-20.fc17
2012-06-26 00:52:23
[SECURITY] Fedora 16 Update: xen-4.1.2-8.fc16
2012-06-26 00:42:08
[SECURITY] Fedora 17 Update: xen-4.1.2-24.fc17
2012-08-05 21:26:27
gentoo
gentoo
Xen: Multiple vulnerabilities
2013-09-27 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2012
2012-10-16 00:00:00