The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash) or potentially gain privilege via a crafted Linux compatibility layer setgroups system call.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freebsd | Freebsd | 9.3 (including) | 9.3 (including) |
| Freebsd | Freebsd | 10.1 (including) | 10.1 (including) |
| Freebsd | Freebsd | 10.2 (including) | 10.2 (including) |
References
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.securitytracker.com/id/1034676
- https://www.freebsd.org/security/advisories/FreeBSD-SA-16:04.linux.asc
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://www.securitytracker.com/id/1034676
- https://www.freebsd.org/security/advisories/FreeBSD-SA-16:04.linux.asc