Vulnerability · Published Jan 18, 2022 · Assigned by freebsd
CVE-2021-29632
High 7.5
In plain English
A high-severity security flaw in FreeBSD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.9%top 41.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In FreeBSD 13.0-STABLE before n247428-9352de39c3dc, 12.2-STABLE before r370674, 13.0-RELEASE before p6, and 12.2-RELEASE before p12, certain conditions involving use of the highlight buffer while text is scrolling on the console, console data may overwrite data structures associated with the system console or other kernel memory.
Affected products (as reported)
References
- https://security.freebsd.org/advisories/FreeBSD-SA-22:01.vt.asc x_refsource_MISC
- https://security.netapp.com/advisory/ntap-20220217-0004/ x_refsource_CONFIRM