Date: Wed, 12 Sep 2018 13:57:04 +0000 (UTC) From: Mark Felder <feld@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r479603 - head/security/vuxml Message-ID: <201809121357.w8CDv4xM091985@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: feld Date: Wed Sep 12 13:57:04 2018 New Revision: 479603 URL: https://svnweb.freebsd.org/changeset/ports/479603 Log: Document FreeBSD-SA-18:12.elf Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Wed Sep 12 13:53:56 2018 (r479602) +++ head/security/vuxml/vuln.xml Wed Sep 12 13:57:04 2018 (r479603) @@ -58,6 +58,37 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="a67c122a-b693-11e8-ac58-a4badb2f4699"> + <topic>FreeBSD -- Improper ELF header parsing</topic> + <affects> + <package> + <name>FreeBSD-kernel</name> + <range><ge>11.2</ge><lt>11.2_3</lt></range> + <range><ge>11.1</ge><lt>11.1_14</lt></range> + <range><ge>10.4</ge><lt>10.4_12</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <h1>Problem Description:</h1> + <p>Insufficient validation was performed in the ELF header + parser, and malformed or otherwise invalid ELF binaries + were not rejected as they should be.</p> + <h1>Impact:</h1> + <p>Execution of a malicious ELF binary may result in a + kernel crash or may disclose kernel memory.</p> + </body> + </description> + <references> + <cvename>CVE-2018-6924</cvename> + <freebsdsa>SA-18:12.elf</freebsdsa> + </references> + <dates> + <discovery>2018-09-12</discovery> + <entry>2018-09-12</entry> + </dates> + </vuln> + <vuln vid="fe818607-b5ff-11e8-856b-485b3931c969"> <topic>Containous Traefik -- exposes the configuration and secret</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201809121357.w8CDv4xM091985>