{"api_version":"1","generated_at":"2026-07-23T10:40:11+00:00","cve":"CVE-2017-1086","urls":{"html":"https://cve.report/CVE-2017-1086","api":"https://cve.report/api/cve/CVE-2017-1086.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-1086","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-1086"},"summary":{"title":"CVE-2017-1086","description":"In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in the struct ptrace_lwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevant bytes or short strings. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of information of the kernel stack of the thread is possible from the debugger. As a result, some bytes from the kernel stack of the thread using ptrace (PT_LWPINFO) call can be observed in userspace.","state":"PUBLISHED","assigner":"freebsd","published_at":"2017-11-16 20:29:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-200","Kernel Information Leak"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"3.3","severity":"LOW","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"2.1","severity":"","vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-17:08.ptrace.asc","name":"https://www.freebsd.org/security/advisories/FreeBSD-SA-17:08.ptrace.asc","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id/1039809","name":"http://www.securitytracker.com/id/1039809","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"FreeBSD ptrace(2) Initialization Error Lets Local Users View Portions of System Memory on the Target System - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/101861","name":"http://www.securityfocus.com/bid/101861","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"FreeBSD CVE-2017-1086 Local Information Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1086","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1086","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"FreeBSD","product":"FreeBSD","version":"affected All supported versions of FreeBSD","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"1086","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"freebsd","cpe5":"freebsd","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2017","cve_id":"1086","cve":"CVE-2017-1086","epss":"0.000750000","percentile":"0.223730000","score_date":"2026-05-13","updated_at":"2026-05-14 00:03:18"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T13:25:17.094Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1039809","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1039809"},{"name":"101861","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/101861"},{"name":"FreeBSD-SA-17:08","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred"],"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-17:08.ptrace.asc"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"FreeBSD","vendor":"FreeBSD","versions":[{"status":"affected","version":"All supported versions of FreeBSD"}]}],"datePublic":"2017-11-15T00:00:00.000Z","descriptions":[{"lang":"en","value":"In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in the struct ptrace_lwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevant bytes or short strings. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of information of the kernel stack of the thread is possible from the debugger. As a result, some bytes from the kernel stack of the thread using ptrace (PT_LWPINFO) call can be observed in userspace."}],"problemTypes":[{"descriptions":[{"description":"Kernel Information Leak","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-11-17T10:57:01.000Z","orgId":"63664ac6-956c-4cba-a5d0-f46076e16109","shortName":"freebsd"},"references":[{"name":"1039809","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1039809"},{"name":"101861","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/101861"},{"name":"FreeBSD-SA-17:08","tags":["vendor-advisory","x_refsource_FREEBSD"],"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-17:08.ptrace.asc"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secteam@freebsd.org","DATE_PUBLIC":"2017-11-15T00:00:00","ID":"CVE-2017-1086","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"FreeBSD","version":{"version_data":[{"version_value":"All supported versions of FreeBSD"}]}}]},"vendor_name":"FreeBSD"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in the struct ptrace_lwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevant bytes or short strings. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of information of the kernel stack of the thread is possible from the debugger. As a result, some bytes from the kernel stack of the thread using ptrace (PT_LWPINFO) call can be observed in userspace."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Kernel Information Leak"}]}]},"references":{"reference_data":[{"name":"1039809","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1039809"},{"name":"101861","refsource":"BID","url":"http://www.securityfocus.com/bid/101861"},{"name":"FreeBSD-SA-17:08","refsource":"FREEBSD","url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-17:08.ptrace.asc"}]}}}},"cveMetadata":{"assignerOrgId":"63664ac6-956c-4cba-a5d0-f46076e16109","assignerShortName":"freebsd","cveId":"CVE-2017-1086","datePublished":"2017-11-16T20:00:00.000Z","dateReserved":"2016-11-30T00:00:00.000Z","dateUpdated":"2024-09-16T23:25:39.726Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-11-16 20:29:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-200","Kernel Information Leak"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","baseScore":2.1,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*","matchCriteriaId":"3B2AEFCC-A2F6-45A6-A2EF-24F7906E44E2"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"1086","Ordinal":"1","Title":"CVE-2017-1086","CVE":"CVE-2017-1086","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"1086","Ordinal":"1","NoteData":"In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in the struct ptrace_lwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevant bytes or short strings. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of information of the kernel stack of the thread is possible from the debugger. As a result, some bytes from the kernel stack of the thread using ptrace (PT_LWPINFO) call can be observed in userspace.","Type":"Description","Title":"CVE-2017-1086"},{"CveYear":"2017","CveId":"1086","Ordinal":"2","NoteData":"2017-11-16","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"1086","Ordinal":"3","NoteData":"2017-11-17","Type":"Other","Title":"Modified"}]}}}