CVE-2022-23089: Out of bound read in elf_note_prpsinfo()
When dumping core and saving process information, procgetargv() might return an sbuf which have a sbuflen() of 0 or -1, which is not properly handled.
An out-of-bound read can happen when user constructs a specially crafted psstring, which in turn can cause the kernel to crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-23089?
CVE-2022-23089 has a severity rating that can potentially lead to kernel crashes due to an out-of-bounds read.
How do I fix CVE-2022-23089?
To fix CVE-2022-23089, update your FreeBSD system to the latest available patch or version that addresses this vulnerability.
What versions of FreeBSD are affected by CVE-2022-23089?
CVE-2022-23089 affects FreeBSD versions from 12.3 up to but not including 13.0.
What type of vulnerability is CVE-2022-23089?
CVE-2022-23089 is an out-of-bounds read vulnerability related to process information handling.
Can CVE-2022-23089 be exploited remotely?
CVE-2022-23089 requires a user to construct a specially crafted ps_string, implying that it is not a remote exploitation vulnerability.