CVE-2015-1415: Freebsd

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile (/boot/encryption.key), which allows local users to obtain sensitive key information by reading the file.

Affected products

• Freebsd Freebsd: up to and including 10.1; version 10.0 only; version 10.1 only

Published 2015-04-10. Last modified 2026-06-17.