CVE-2018-6924

HIGH

FreeBSD Kernel Memory Disclosure and DoS via ELF Header Parsing

Title source: llm

Description

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could allow a malicious ELF binary to cause a kernel crash or disclose kernel memory.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1041646

Patch, Vendor Advisory vendor-advisory x_refsource_freebsd

https://security.freebsd.org/advisories/FreeBSD-SA-18:12.elf.asc

Scores

CVSS v3 7.1

EPSS 0.0006

EPSS Percentile 17.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Details

CWE

CWE-20

Status published

Products (3)

freebsd/freebsd 10.4

freebsd/freebsd 11.2

freebsd/freebsd 11.0 - 11.1

Published Sep 12, 2018

Tracked Since Feb 18, 2026