CVE-2013-2171: Medium severity freebsd kernel vulnerability
The vmmaplookup function in sys/vm/vmmap.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2171?
CVE-2013-2171 has a medium to high severity rating due to its ability to allow local users to bypass filesystem write permissions.
How do I fix CVE-2013-2171?
To fix CVE-2013-2171, you should update your FreeBSD system to a version higher than 9.1-RELEASE-p4.
Who is affected by CVE-2013-2171?
CVE-2013-2171 affects FreeBSD versions 9.0, 9.1, and 9.1-p4.
What systems are vulnerable to CVE-2013-2171?
Systems running FreeBSD 9.0 through 9.1-RELEASE-p4 are vulnerable to CVE-2013-2171.
What happens if CVE-2013-2171 is exploited?
Exploitation of CVE-2013-2171 can allow local users to gain unauthorized write access to memory locations and possibly compromise file systems.