SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2007-4304

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages".

MEDIUM 6.2EPSS 0.25%

Does this matter?

Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.

Description

CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local users to have an unknown impact related to an "incorrect write protection of pages".

CVSS 2.0
6.2 MEDIUMAV:L/AC:H/Au:N/C:C/I:C/A:C
EPSS
0.25% probability · 17th percentile
CISA KEV
Not listed
Affected
cerb/cerbng
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.