CVE-2026-49414

7.8 Élevée

Publiée le 27/06/2026 à 12:16 · Modifiée le 01/07/2026 à 16:04 · Analysée par le NVD · Source : secteam@freebsd.org

Description

The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code that computes the PIE base address, rather than before. As a result, a user-requested ASLR disable was still in effect at the point where the base address was chosen. An unprivileged local user can disable ASLR for a setuid PIE binary by calling procctl(2) before execve(2). This makes exploitation of any separate memory corruption vulnerability in that binary significantly easier.

Traduire en français

Produits concernés

FreeBSD
Freebsd freebsd

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.8 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-179

Références

https://security.freebsd.org/advisories/FreeBSD-SA-26:32.elf.asc Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories