CVE-2013-2171

The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls.

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

6.94% chance of exploitation in the next 30 days, 94th percentile

Published

2013-07-02

Updated

2024-08-06

Proof-of-concept exploits (2)

• 0xGabe/FreeBSD-9.0-9.1-Privilege-Escalation1★ · 2021-11-18
• Gabriel-Lima232/FreeBSD-9.0-9.1-Privilege-Escalation1★ · 2021-11-18

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/local/mmap.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/26454
• https://www.exploit-db.com/exploits/26368

References

• CVE Record
• NVD entry

Related

• CVE-2021-38314
• CVE-2021-41773
• CVE-2021-42013
• CVE-2022-35914
• CVE-2013-2165
• CVE-2013-2173