CVE-2017-1086 is a low-severity information leakage vulnerability affecting FreeBSD versions prior to 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24. The vulnerability allows a local attacker to observe portions of the kernel stack from a debugging thread due to uninitialized bytes in the ptrace_lwpinfo structure. This could lead to the disclosure of sensitive kernel memory. The CVSS score is 3.3 (LOW), indicating a local attack vector with low complexity and no integrity or availability impact, only a low confidentiality impact. There is no evidence of active exploitation, nor are there any public exploit modules or proof-of-concept code available. The vulnerability has received minimal community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.