| Title | FreeBSD における古典的バッファオーバーフローの脆弱性 |
|---|---|
| Summary | FreeBSD には、古典的バッファオーバーフローの脆弱性が存在します。 |
| Possible impacts | 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | Dec. 1, 2020, midnight |
| Registration Date | Dec. 2, 2021, 6:15 p.m. |
| Last Update | Dec. 2, 2021, 6:15 p.m. |
| CVSS3.0 : 緊急 | |
| Score | 9.8 |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CVSS2.0 : 危険 | |
| Score | 10 |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| FreeBSD |
| FreeBSD p1 未満の 12.2-RELEASE |
| FreeBSD p11 未満の 12.1-RELEASE |
| FreeBSD p5 未満の 11.4-RELEASE |
| FreeBSD r368250 未満の 12.2-STABLE |
| FreeBSD r368253 未満の 11.4-STABLE |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2021年12月02日] 掲載 |
Dec. 2, 2021, 6:15 p.m. |
| Summary | In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 rtsold(8) does not verify that the RDNSS option does not extend past the end of the received packet before processing its contents. While the kernel currently ignores such malformed packets, it passes them to userspace programs. Any programs expecting the kernel to do validation may be vulnerable to an overflow. |
|---|---|
| Publication Date | March 30, 2021, 5:15 a.m. |
| Registration Date | March 30, 2021, 10 a.m. |
| Last Update | Nov. 21, 2024, 2:18 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:12.1:p7:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:12.1:p9:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:12.1:p8:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:* | |||||
| cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:* | |||||