Return
-
Title
Quest KACE response to FreeBSD vulnerability CVE-2023-5941 -
Description
This article addresses the status of the KACE Systems Management Appliance regarding FreeBSD libc stdio buffer overflow vulnerability described under CVE-2023-5941 which affects FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 . For more details about this vulnerability please refer to: CVE-2023-5941
Affected KACE SMA versions: 13.2.181 -
Resolution
KACE has determined that the vulnerability described under CVE-2023-5941 has a low impact on the appliance. However, KACE SMA version 13.2.182 has been released to address this vulnerability, available for download here .
Quest recommends that all customers ensure they are running a supported version of the KACE SMA.
For any questions or assistance on this topic please contact our Tech Support . -
Additional Information
Defect ID K1-34760.