CVE-2017-1086

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in the struct ptrace_lwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevant bytes or short strings. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of information of the kernel stack of the thread is possible from the debugger. As a result, some bytes from the kernel stack of the thread using ptrace (PT_LWPINFO) call can be observed in userspace.

• CWE-200

• http://www.securityfocus.com/bid/101861Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039809Third Party Advisory, VDB Entry
• https://www.freebsd.org/security/advisories/FreeBSD-SA-17:08.ptrace.ascVendor Advisory
• http://www.securityfocus.com/bid/101861Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039809Third Party Advisory, VDB Entry
• https://www.freebsd.org/security/advisories/FreeBSD-SA-17:08.ptrace.ascVendor Advisory

Published

Nov 16, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10854Corega CG-WGR1200 firmware 2.20 and earlier allows an attack…
• CVE-2017-10855Untrusted search path vulnerability in FENCE-Explorer for Wi…
• CVE-2017-10856SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to …
• CVE-2017-10857Cybozu Office 10.0.0 to 10.6.1 allows authenticated attacker…
• CVE-2017-10858Untrusted search path vulnerability in "i-filter 6.0 install…
• CVE-2017-10859Untrusted search path vulnerability in "i-filter 6.0 install…
• CVE-2017-10860Untrusted search path vulnerability in "i-filter 6.0 install…
• CVE-2017-10861Directory traversal vulnerability in QND Advance/Standard al…
• CVE-2017-10862jwt-scala 1.2.2 and earlier fails to verify token signatures…
• CVE-2017-10863Untrusted search path vulnerability in HIBUN Confidential Fi…
• CVE-2017-10864Untrusted search path vulnerability in Installer of HIBUN Co…
• CVE-2017-10865Untrusted search path vulnerability in HIBUN Confidential Fi…