Vulnerability · Published Nov 8, 2023 · Assigned by freebsd

CVE-2023-5978Incorrect libcap_net limitation list manipulation

High 7.5

In plain English

A high-severity privilege mismanagement in FreeBSD from FreeBSD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS NVD)7.5High

Exploit odds (30 days)0.5%top 56.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service incorrectly validates that updated constraints are strictly subsets of the active constraints. When only a list of resolvable domain names was specified without setting any other limitations, an application could submit a new list of domains including include entries not previously listed. This could permit the application to resolve domain names that were previously restricted.

Affected products (as reported)

Vendor	Product	Versions
FreeBSD	FreeBSD	13.2-RELEASE – before p5

Weakness: CWE-269

In plain English

Official description

Affected products (as reported)

References