Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-25941

The jail(2) system call has not limited a visiblity of allocated TTYs (the kern.ttys sysctl). This gives rise to an information leak about processes outside the current jail. Attacker can get information about TTYs allocated on the host or in other jails. Effectively, the information printed by "pstat -t" may be leaked.

Published

2024-02-15T05:15:11.200

Last Modified

2025-06-04T21:55:22.687

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 3.3 (LOW)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System freebsd freebsd < 13.2 Yes
Operating System freebsd freebsd 13.2 Yes
Operating System freebsd freebsd 13.2 Yes
Operating System freebsd freebsd 13.2 Yes
Operating System freebsd freebsd 13.2 Yes
Operating System freebsd freebsd 13.2 Yes
Operating System freebsd freebsd 13.2 Yes
Operating System freebsd freebsd 13.2 Yes
Operating System freebsd freebsd 13.2 Yes
Operating System freebsd freebsd 13.2 Yes
Operating System freebsd freebsd 14.0 Yes
Operating System freebsd freebsd 14.0 Yes
Operating System freebsd freebsd 14.0 Yes
Operating System freebsd freebsd 14.0 Yes
Operating System freebsd freebsd 14.0 Yes
Operating System freebsd freebsd 14.0 Yes
Operating System freebsd freebsd 14.0 Yes
References