CVE-2021-29626

Published Apr 7, 2021

Last updated 2 years ago

Overview

Description: In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process to maintain a mapping after it is freed, allowing the process to read private data belonging to other processes or the kernel.
Source: secteam@freebsd.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 2.1
Impact score: 2.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-416

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "55C77F87-F478-418A-861F-554D2196090B",
            "versionEndExcluding": "11.4"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "17AC6343-11EC-4586-91EB-D7C4D4C1699E",
            "versionEndExcluding": "12.2",
            "versionStartIncluding": "12.0"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4A865EA1-01D7-4E5A-9D13-80780F8A9D7A"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B80FBD1B-D03E-4408-9150-2F86FAF7F1D7"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9FCA6A72-2A72-45FD-A43D-B5BF7C329121"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C04EE177-C7D1-4049-B680-F961A27C677F"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "218AF216-7B03-4C02-B55F-2316AF14074B"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "33266717-0359-4243-868B-B84436E2A89E"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2B0FB7BE-DB4E-47CE-8B51-C43DC5AADD17"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D427061-B399-47BA-865D-9FAB315210CF"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "62A178A3-6A52-4981-9A27-FB07AD8AF778"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "54A487B1-E5CE-4C76-87E8-518D24C5D86D"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:13.0:beta1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7412DBD8-BB1F-48A8-AAE1-BA5C8D7BDDF7"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:13.0:beta2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "833DFF5B-BC50-424A-ABCF-EC632F421B76"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:13.0:beta3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9F27016E-4117-4094-BB7A-9C56E38024D9"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:13.0:beta4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B149BF69-951D-47B4-996C-9E4773DA75B7"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:13.0:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FC271C93-EB83-4301-B7BA-F3249B71B1EA"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:13.0:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "04329338-AC28-4A74-BE6B-CE8EC6CC37B7"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:13.0:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ADBA841F-5C83-4759-84B7-B59DA1B12EA8"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:13.0:rc4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6A8F38B3-A6DA-4178-A2BD-0D4F0267C384"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:13.0:rc5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9BB028A0-70F6-42DA-9E5A-F7AAF74ED45B"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Configurations

References