CVE-2026-101303
CVE-2026-101303 · IPv6 UDP sendto(2) bypasses jail loopback restriction
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A process in a classic (non-VNET) jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail network isolation.
CVSS 7.5 · Alta · EPSS 0,2%
- Publicación
- Actualización
Productos y versiones afectados
freebsd
- Versiones
- ≥ 15.1-RELEASE, < p4: Afectada (release)
- ≥ 15.0-RELEASE, < p14: Afectada (release)
- ≥ 14.5-RELEASE, < p1: Afectada (release)
- ≥ 14.4-RELEASE, < p10: Afectada (release)
Sin corrección publicada