Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the ffs_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted UFS filesystem that causes invalid or large size parameters to be provided to the kmem_alloc function. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD UFS文件系统本地整数溢出漏洞
Vulnerability Description
FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD 6.1内核的UFS文件系统处理代码没有正确的处理被破坏的数据结构,本地攻击者可能利用此漏洞导致整数溢出。 在加载特制的UFS文件分区时,攻击者可以直接控制所分配的内核内存数量,通过ffs_mountfs函数及之后对malloc、uma_large_malloc和page_alloc的调用控制对kmem_alloc()所传送的值。很大的或无效的大小参数会导致内核忙碌。如果从文件系统流拷贝了用户所控制数据的话
CVSS Information
N/A
Vulnerability Type
N/A