Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-23089

Out of bound read in elf_note_prpsinfo()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
freebsd

Description

When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1, which is not properly handled. An out-of-bound read can happen when user constructs a specially crafted ps_string, which in turn can cause the kernel to crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FreeBSD FreeBSD

Default version status: unknown

  • 13.1-RELEASE to < p1affected
  • 13.0-RELEASE to < p12affected
  • 12.3-RELEASE to < p6affected

References