← Back

CVE-2018-6924

nvd nist
Published: Sep 12, 2018Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD

Description

In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could allow a malicious ELF binary to cause a kernel crash or disclose kernel memory.

Affected (3)

Products: Freebsd: Freebsd
Freebsd
1 product
Freebsd
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
Version 10.4
Freebsd
Version 11.2
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
From 11.0 to 11.1

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: secteam@freebsd.org
Third Party AdvisoryVDB Entry
Source: secteam@freebsd.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.