FreeBSD CVE-2018-6919 Multiple Local Information Disclosure Vulnerabilities

Bugtraq ID:	103760
Class:	Design Error
CVE:	CVE-2018-6919
Remote:	No
Local:	Yes
Published:	Apr 04 2018 12:00AM
Updated:	Apr 04 2018 12:00AM
Credit:	Ilja van Sprundel
Vulnerable:	FreeBSD Freebsd 11.1-RELEASE-p7 FreeBSD Freebsd 11.1-RELEASE-p4 FreeBSD Freebsd 11.1-RC2-p1 FreeBSD Freebsd 11.1-RC1-p1 FreeBSD Freebsd 11.1 FreeBSD Freebsd 10.4-RELEASE-p6 FreeBSD Freebsd 10.4-RELEASE-p3 FreeBSD Freebsd 10.4 FreeBSD Freebsd 10.3-RELEASE-p5 FreeBSD Freebsd 10.3-RELEASE-p4 FreeBSD Freebsd 10.3-RELEASE-p3 FreeBSD Freebsd 10.3-RELEASE-p27 FreeBSD Freebsd 10.3-RELEASE-p24 FreeBSD Freebsd 10.3-RELEASE-p20 FreeBSD Freebsd 10.3-RELEASE-p2 FreeBSD Freebsd 10.3-RELEASE-p19 FreeBSD Freebsd 10.3-RELEASE-p15 FreeBSD Freebsd 10.3-RELEASE-p13 FreeBSD Freebsd 10.3-RELEASE-p1 FreeBSD Freebsd 10.3
Not Vulnerable:	FreeBSD Freebsd 11.1-STABLE FreeBSD Freebsd 11.1-RELEASE-p9 FreeBSD Freebsd 10.4-STABLE FreeBSD Freebsd 10.4-RELEASE-p8 FreeBSD Freebsd 10.3-RELEASE-p29

FreeBSD CVE-2018-6919 Multiple Local Information Disclosure Vulnerabilities

FreeBSD is prone to multiple local information-disclosure vulnerabilities.

Local attackers can exploit these issues to cause a memory leak to obtain sensitive information that may lead to further attacks.

FreeBSD CVE-2018-6919 Multiple Local Information Disclosure Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FreeBSD CVE-2018-6919 Multiple Local Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or contact the vendor for more information.

FreeBSD CVE-2018-6919 Multiple Local Information Disclosure Vulnerabilities

References:

• FreeBSD Homepage (FreeBSD)
  
• FreeBSD-EN-18:04.mem: Multiple small kernel memory disclosures (FreeBSD)