Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD "AIO"库交叉进程重写内存漏洞
Vulnerability Description
aio.h是POSIX标准的异步I/O的实现，如果要使FreeBSD支持AIO的话，只需要在编译内核时打开"VFS_AIO"选项，缺省情况下该选项是关闭的。 aio.h头文件存在一个竞争条件安全漏洞，允许本地攻击者提升权限。 在某种条件下，对一个输入的套接口未决的读操作可能导致最终调用"execve"，最后读操作继续，并且对新的进程的内存空间进行写操作。本地用户如果能够创建并运行一个调用SUID程序的恶意程序，就可能用任意数据重写SUID程序的任意内存位置，这就可能导致提升权限。
CVSS Information
N/A
Vulnerability Type
N/A