vulnwire
6.2med

CVE-2007-4304

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local u…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
6.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 17%
Public exploits
0
none known

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages".

Exploit prediction (EPSS)

0.25% probability of exploitation in the next 30 days, higher than 17% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.06.2AV:L/AC:H/Au:N/C:C/I:C/A:C

References

  • watson.org /~robert/2007woot/ · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.