Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: FreeBSD — security.freebsd.org/advisories/FreeBSD-SA-24:11.ctl.asc Clear all filters
TI-2024-30174 CVE-2024-45063 · GHSA-p8gg-cp5h-w499

Multiple issues in ctl(4) CAM Target Layer

Priority MEDIUM 43

The function ctl_write_buffer incorrectly set a flag which resulted in a kernel Use-After-Free when a command finished processing.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00521 Published 2024-09-05 Fixed in p4, p10 +1 CWE-416
TI-2024-28781 CVE-2024-43110 · GHSA-r58j-7299-f87q

Multiple issues in ctl(4) CAM Target Layer

Priority MEDIUM 40

The ctl_request_sense function could expose up to three bytes of the kernel heap to userspace.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00395 Published 2024-09-05 Fixed in p4, p10 +1 CWE-125
TI-2024-28394 CVE-2024-42416 · GHSA-hgfp-qxpq-6q7w

Multiple issues in ctl(4) CAM Target Layer

Priority MEDIUM 40

The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00395 Published 2024-09-05 Fixed in p4, p10 +1 CWE-790
TI-2024-07585 CVE-2024-8178 · GHSA-9qxr-9qr6-7x7w

Multiple issues in ctl(4) CAM Target Layer

Priority MEDIUM 43

The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00601 Published 2024-09-05 Fixed in p4, p10 +1 CWE-908