Lucene search
PRIOn knowledge basePRION:CVE-2022-23084HistoryFeb 15, 2024 - 5:15 a.m.
Memory corruption
2024-02-1505:15:00
PRIOn knowledge base
www.prio-n.com
3
time-of-check
time-of-use
bug
nmreq_copyin
kernel memory
corruption
netmap
devfs_ruleset
privileged process
jail
host environment
The total size of the user-provided nmreq to nmreq_copyin() was first computed and then trusted during the copyin. This time-of-check to time-of-use bug could lead to kernel memory corruption.
On systems configured to include netmap in their devfs_ruleset, a privileged process running in a jail can affect the host environment.
Related
zdi
zdi
cve
cve
CVE-2022-23084
2024-02-15 05:15:08
cvelist
cvelist
CVE-2022-23084 Potential jail escape vulnerabilities in netmap
2024-02-15 04:52:09
nvd
nvd
CVE-2022-23084
2024-02-15 05:15:08
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:04.netmap
2022-04-06 00:00:00
nessus
nessus
freebsd
freebsd
FreeBSD -- Potential jail escape vulnerabilities in netmap
2022-04-06 00:00:00