FreeBSD CVE-2017-1087 Local Privilege Escalation Vulnerabiity

Bugtraq ID:	101867
Class:	Design Error
CVE:	CVE-2017-1087
Remote:	No
Local:	Yes
Published:	Nov 15 2017 12:00AM
Updated:	Dec 19 2017 10:00PM
Credit:	Whitewinterwolf
Vulnerable:	FreeBSD Freebsd 10.4 FreeBSD Freebsd 10.3-RELEASE-p5 FreeBSD Freebsd 10.3-RELEASE-p4 FreeBSD Freebsd 10.3-RELEASE-p3 FreeBSD Freebsd 10.3-RELEASE-p20 FreeBSD Freebsd 10.3-RELEASE-p2 FreeBSD Freebsd 10.3-RELEASE-p19 FreeBSD Freebsd 10.3-RELEASE-p15 FreeBSD Freebsd 10.3-RELEASE-p13 FreeBSD Freebsd 10.3-RELEASE-p1 FreeBSD Freebsd 10.3 FreeBSD FreeBSD 10
Not Vulnerable:	FreeBSD Freebsd 10.4-STABLE FreeBSD Freebsd 10.4-RELEASE-p3 FreeBSD Freebsd 10.3-RELEASE-p24

FreeBSD CVE-2017-1087 Local Privilege Escalation Vulnerabiity

FreeBSD is prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to gain elevated privileges or cause denial-of-service condition.

FreeBSD CVE-2017-1087 Local Privilege Escalation Vulnerabiity

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FreeBSD CVE-2017-1087 Local Privilege Escalation Vulnerabiity

Solution:
Updates are available. Please see the references or vendor advisory for more information.

FreeBSD CVE-2017-1087 Local Privilege Escalation Vulnerabiity

References:

• FreeBSD Homepage (FreeBSD)
  
• FreeBSD-SA-17:09.shm: POSIX shm allows jails to access global namespace (FreeBSD)