CVE-2021-29628

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-29628
In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause SMAP protections to be disabled for the duration of the system call. This weakness could be combined with other kernel bugs to craft an exploit.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://security.FreeBSD.org/advisories/FreeBSD-SA-21:11.smap.asc Exploit Vendor Advisory
https://security.netapp.com/advisory/ntap-20210713-0002/ Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-21:11.smap.asc Exploit Vendor Advisory
https://security.netapp.com/advisory/ntap-20210713-0002/ Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:beta1-p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:beta3-p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc5-p1:*:*:*:*:*:*
History

21 Nov 2024, 06:01

Type Values Removed Values Added
References () https://security.FreeBSD.org/advisories/FreeBSD-SA-21:11.smap.asc - Exploit, Vendor Advisory () https://security.FreeBSD.org/advisories/FreeBSD-SA-21:11.smap.asc - Exploit, Vendor Advisory
References () https://security.netapp.com/advisory/ntap-20210713-0002/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20210713-0002/ - Third Party Advisory

16 May 2022, 20:55

Type Values Removed Values Added
References
  • (CONFIRM) https://security.netapp.com/advisory/ntap-20210713-0002/ - Third Party Advisory

10 Jun 2021, 13:58

Type Values Removed Values Added
CWE CWE-863
CPE cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p5:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:beta1-p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p4:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:beta3-p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p6:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:13.0:rc5-p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*
References (MISC) https://security.FreeBSD.org/advisories/FreeBSD-SA-21:11.smap.asc - (MISC) https://security.FreeBSD.org/advisories/FreeBSD-SA-21:11.smap.asc - Exploit, Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : 5.0
v3 : 7.5

28 May 2021, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2021-05-28 15:15

Updated : 2024-11-21 06:01

NVD link : CVE-2021-29628

Mitre link : CVE-2021-29628

CVE.ORG link : CVE-2021-29628

JSON object : View

Products Affected

freebsd

  • freebsd
CWE
CWE-863

Incorrect Authorization