CVE-2025-0374: Freebsd

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as /etc/master.passwd. An unprivileged local user may be able to read encrypted root and user passwords from the temporary master.passwd file created in /var/db/etcupdate/conflicts. This is possible only when conflicts within the password file arise during an update, and the unprotected file is deleted when conflicts are resolved.

Affected products

• Freebsd Freebsd: from 14.2-RELEASE, before p1 (fixed in p1); from 14.1-RELEASE, before p7 (fixed in p7); from 13.4-RELEASE, before p3 (fixed in p3)

Published 2025-01-30. Last modified 2026-06-17.