CVE-2022-23091
Memory disclosure by stale virtual memory mapping
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
15 feb 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause.
An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to other processes or the kernel.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Productos afectados
FreeBSD · FreeBSD¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →