DSA-2325-1 kfreebsd-8 -- privilege escalation/denial of service

Related Vulnerabilities: CVE-2011-4062  

Buffer overflow in the Linux emulation support in FreeBSD kernel allows local users to cause a denial of service (panic) and possibly execute arbitrary code by calling the bind system call with a long path for a UNIX-domain socket, which is not properly handled when the address is used by other unspecified system calls. For the stable distribution (squeeze), this problem has been fixed in version 8.1+dfsg-8+squeeze2. For the unstable distribution (sid), this problem has been fixed in version 8.2-9. We recommend that you upgrade your kfreebsd-8 packages.

Debian Security Advisory

DSA-2325-1 kfreebsd-8 -- privilege escalation/denial of service

Date Reported:
23 Oct 2011
Affected Packages:
kfreebsd-8
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2011-4062.
More information:

Buffer overflow in the Linux emulation support in FreeBSD kernel allows local users to cause a denial of service (panic) and possibly execute arbitrary code by calling the bind system call with a long path for a UNIX-domain socket, which is not properly handled when the address is used by other unspecified system calls.

For the stable distribution (squeeze), this problem has been fixed in version 8.1+dfsg-8+squeeze2.

For the unstable distribution (sid), this problem has been fixed in version 8.2-9.

We recommend that you upgrade your kfreebsd-8 packages.