{"id":"CVE-2013-2171","aliases":["DEBIAN-CVE-2013-2171","DSA-2714-1","EUVD-2013-2131","GHSA-gmfh-rp5h-w5mv"],"status":"published","title":"The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD...","description":"The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls.","severity":{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06942,"percentile":0.94154,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-264"],"published":"2013-06-25T00:00:00Z","modified":"2026-06-16T23:52:52Z","exploits":[{"source":"exploitdb","id":"EDB-26368","title":"FreeBSD 9.0 \u003c 9.1 - 'mmap/ptrace' Local Privilege Escalation","type":"local","platform":"freebsd","date":"2013-06-21","verified":true,"url":"https://www.exploit-db.com/exploits/26368"},{"source":"exploitdb","id":"EDB-26454","title":"FreeBSD 9 - Address Space Manipulation Privilege Escalation (Metasploit)","type":"local","platform":"freebsd","date":"2013-06-26","verified":true,"url":"https://www.exploit-db.com/exploits/26454"},{"source":"metasploit","id":"exploit/freebsd/local/mmap","title":"FreeBSD 9 Address Space Manipulation Privilege Escalation","type":"exploit","platform":"BSD","date":"2013-06-18","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/freebsd/local/mmap"},{"source":"pocgithub","id":"0xGabe/FreeBSD-9.0-9.1-Privilege-Escalation","title":"0xGabe/FreeBSD-9.0-9.1-Privilege-Escalation","date":"2021-11-18","url":"https://github.com/0xGabe/FreeBSD-9.0-9.1-Privilege-Escalation"}],"fixes":[{"ecosystem":"Debian:7","package":"kfreebsd-9","fixed_in":["9.0-10+deb70.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"kfreebsd-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0-10+deb70.2"}]}],"versions":["9.0-10","9.0-10+deb70.1"]}],"products":[{"vendor":"freebsd","product":"freebsd"}],"references":[{"url":"http://www.freebsd.org/security/advisories/FreeBSD-SA-13:06.mmap.asc","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","Vendor Advisory"]},{"url":"http://www.debian.org/security/2013/dsa-2714","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://svnweb.freebsd.org/base?view=revision\u0026revision=251901","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2171"},{"url":"https://github.com/advisories/GHSA-gmfh-rp5h-w5mv"}],"sources":{"cve":[{"id":"CVE-2013-2171","description":"The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls.","status":"published","published":"2013-07-02T01:00:00Z","modified":"2024-08-06T15:27:41.094Z","updated_at":"2026-11-02T14:34:56.530545Z"}],"euvd":[{"id":"EUVD-2013-2131","description":"The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls.","status":"published","published":"2013-07-02T01:00:00Z","modified":"2024-08-06T15:27:41Z","updated_at":"2026-11-03T01:56:39.164386Z"}],"ghsa":[{"id":"GHSA-gmfh-rp5h-w5mv","title":"The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD...","description":"The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls.","status":"published","published":"2022-05-14T01:19:58Z","modified":"2023-02-02T05:03:20Z","updated_at":"2026-11-02T14:51:37.12522Z"}],"nvd":[{"id":"CVE-2013-2171","description":"The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a memory location, which allows local users to bypass filesystem write permissions and consequently gain privileges via a crafted application that leverages read permissions, and makes mmap and ptrace system calls.","status":"published","published":"2013-07-02T03:43:33.647Z","modified":"2026-06-16T23:52:52.77Z","cvss":[{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:29.210317Z"}],"osv":[{"id":"DSA-2714-1","title":"kfreebsd-9 - programming error","status":"published","published":"2013-06-25T00:00:00Z","modified":"2026-03-09T01:20:55.412273Z","updated_at":"2026-11-02T15:46:15.489951Z"}]}}