CVE-2009-1436: Freebsd

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file.

Affected products

• Freebsd Freebsd: version 6.3 only; version 6.4 only; version 7.0 only; version 7.1 only; version 7.2 only

Published 2009-04-27. Last modified 2026-06-16.