VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 28, 2020· Updated Aug 5, 2024

CVE-2019-15876

CVE-2019-15876

Description

In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to send passthrough commands to the device firmware.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • FreeBSD/FreeBSDdescription
  • FreeBSD/FreeBSDllm-fuzzy
    Range: <=12.1-RELEASE-p2, <=11.3-RELEASE-p6, 12.1-STABLE before r356089, 11.3-STABLE before r356090

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.