FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

FreeBSD -- Lost mbuf flag resulting in data corruption

Affected packages
7.1 < FreeBSD < 7.1_13
7.3 < FreeBSD < 7.3_2
8.0 < FreeBSD < 8.0_4
8.1 < FreeBSD < 8.1

Details

VuXML ID 7a09a8df-ca41-11df-aade-0050568f000c
Discovery 2010-07-13
Entry 2010-10-24

Problem Description:

The read-only flag is not correctly copied when a mbuf buffer reference is duplicated. When the sendfile(2) system call is used to transmit data over the loopback interface, this can result in the backing pages for the transmitted file being modified, causing data corruption.

References

FreeBSD Advisory SA-10:07.mbuf