Vulnerability in Freebsd

CVE-2004-0435

Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk.

EPSS: 0.003 (25.6th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 4.0, 4.8, 4.9
  • N/a — versions n/a

References