Vulnerabilitycritical
Critical Ping Vulnerability Allows Remote Attackers to Take Over FreeBSD Systems
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-44731 | A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap | 7.8 | <1% | PoC ×4 | |
| CVE-2022-23093 | ping reads raw IP packets from the network to process responses in the pr_pack() function | 6.5 | 2% | ||
| CVE-2022-3328 | Race condition in snap-confine's must_mkdir_and_open_with_perms() | 7.0 | <1% | ||
CVE-2022-41973+1 related CVE | multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974 | 7.8 | <1% | PoC ×7 |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Dec 05, 2022 Endpoint Security / Pen Testing The maintainers of the FreeBSD operating system have released updates to remediate a security vulnerability impacting the ping module that could be potentially exploited to crash the program or trigger remote code execution.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.