CVEvulnerability

CVE-2018-6917

7.5 HIGH Published 2018-04-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-04-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-190

Description

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an integer overflow, leading to the use of arbitrary kernel memory as glyph data. Unprivileged users may be able to access privileged kernel data.

Affected configurations

• freebsd freebsd (>= 10.0 < 10.4) • freebsd freebsd (>= 11.0 < 11.1)

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References