Secunia

Some vulnerabilities have been reported in FreeBSD, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and potentially gain escalated privileges.

1) A use-after-free error caused by a race condition within the pipe "close()" implementation related to kqueues can be exploited to e.g. execute arbitrary code with kernel privileges.

2) A NULL pointer dereference error can be exploited to e.g. execute arbitrary code with kernel privileges.

For more information:
SA36945

NOTE: Additionally, the vendor provides an enhancement against NULL pointer exploits.

Solution
Update FreeBSD or apply patches.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Przemyslaw Frasunek.

Changelog
Further details available in Customer Area

Original Advisory
1) http://security.freebsd.org/advisories/FreeBSD-SA-09:13.pipe.asc
2) http://security.freebsd.org/advisories/FreeBSD-SA-09:14.devfs.asc

http://security.freebsd.org/advisories/FreeBSD-EN-09:05.null.asc

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area