The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow those applications to read previously used sensitive memory.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.0009
Percentile: 0.26614

CVSS Scoring

Affected Products

• cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:4.11:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*

← Back to Home