From f9be46acb25f8a721ded11bc8555daff037326bc Mon Sep 17 00:00:00 2001 From: Philip Paeps Date: Wed, 4 Oct 2023 09:16:18 +0800 Subject: security/vuxml: add FreeBSD SAs released on 2023-10-03 FreeBSD-SA-23:12.msdosfs affects 12.4 and 13.2 FreeBSD-SA-23:13.capsicum affects 13.2 FreeBSD-SA-23:14.smccc affects 13.2 --- security/vuxml/vuln/2023.xml | 91 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 91 insertions(+) diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml index 286acda968b5..54e88ab21ed5 100644 --- a/security/vuxml/vuln/2023.xml +++ b/security/vuxml/vuln/2023.xml @@ -1,3 +1,94 @@ + + FreeBSD -- arm64 boot CPUs may lack speculative execution protections + + + FreeBSD-kernel + 13.213.2_4 + + + + +

Problem Description:

On CPU 0 the check for the SMCCC workaround is called before + SMCCC support has been initialized.

Impact:

No speculative execution workarounds are installed on CPU 0.

+ + + + CVE-2023-5370 + SA-23:14.smccc + + + 2023-10-03 + 2023-10-04 + + + + + FreeBSD -- copy_file_range insufficient capability rights check + + + FreeBSD-kernel + 13.213.2_4 + + + + +

Problem Description:

The syscall checked only for the CAP_READ and CAP_WRITE + capabilities on the input and output file descriptors, respectively. + Using an offset is logically equivalent to seeking, and the syscall + must additionally require the CAP_SEEK capability.

Impact:

A sandboxed process with only read or write but no seek capability + on a file descriptor may be able to read data from or write data + to an arbitrary location within the file corresponding to that file + descriptor.

+ + + + CVE-2023-5369 + SA-23:13.capsicum + + + 2023-10-03 + 2023-10-04 + + + + + FreeBSD -- msdosfs data disclosure + + + FreeBSD-kernel + 13.213.2_4 + 12.412.4_6 + + + + +

Problem Description:

In certain cases using the truncate or ftruncate system call + to extend a file size populates the additional space in the file + with unallocated data from the underlying disk device, rather than + zero bytes.

Impact:

A user with write access to files on a msdosfs file system may + be able to read unintended data (for example, from a previously + deleted file).

+ + + + CVE-2023-5368 + SA-23:12.msdosfs + + + 2023-10-03 + 2023-10-04 + + + mediawiki -- multiple vulnerabilities -- cgit v1.2.3