CVE-2023-5368

CVE-2023-5368 describes a vulnerability in the msdosfs filesystem on FreeBSD, where 'truncate' or 'ftruncate' system calls can populate newly allocated file space with unallocated data from the disk instead of zero bytes. This allows an attacker with write access to files on an msdosfs filesystem to potentially read sensitive, previously deleted data. The vulnerability has a CVSS v3.1 score of 6.5 (Medium), indicating a network-based attack with low complexity, requiring low privileges, and resulting in high confidentiality impact without affecting integrity or availability. Its EPSS and FAUCET Risk Score are low, suggesting a limited likelihood of exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage, suggesting it is not a widely recognized or actively targeted threat.