Certain programming errors in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freebsd | Freebsd | 4.0-releng (including) | 4.0-releng (including) |
| Freebsd | Freebsd | 4.8 (including) | 4.8 (including) |
| Freebsd | Freebsd | 4.8-pre-release (including) | 4.8-pre-release (including) |
| Freebsd | Freebsd | 4.8-release_p6 (including) | 4.8-release_p6 (including) |
| Freebsd | Freebsd | 4.8-releng (including) | 4.8-releng (including) |
| Freebsd | Freebsd | 4.9 (including) | 4.9 (including) |
| Freebsd | Freebsd | 4.9-pre-release (including) | 4.9-pre-release (including) |
| Freebsd | Freebsd | 4.9-releng (including) | 4.9-releng (including) |
| Freebsd | Freebsd | 4.10 (including) | 4.10 (including) |
| Freebsd | Freebsd | 4.10-release (including) | 4.10-release (including) |
| Freebsd | Freebsd | 4.10-releng (including) | 4.10-releng (including) |
| Freebsd | Freebsd | 5.2 (including) | 5.2 (including) |
| Freebsd | Freebsd | 5.2.1-release (including) | 5.2.1-release (including) |
| Freebsd | Freebsd | 5.2.1-releng (including) | 5.2.1-releng (including) |
References
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:11.msync.asc
- http://secunia.com/advisories/11714
- http://www.securityfocus.com/bid/10416
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16254
- ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:11.msync.asc
- http://secunia.com/advisories/11714
- http://www.securityfocus.com/bid/10416
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16254