VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Apr 28, 2020· Updated Jun 17, 2026

CVE-2019-15876

CVE-2019-15876

Description

In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to send passthrough commands to the device firmware.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • FreeBSD/FreeBSD10 versions
    cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*+ 9 more
    • cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*
  • FreeBSD/FreeBSDdescription
  • FreeBSD/oce network driverllm-create
    Range: <11.3-RELEASE-p7, <11.3-STABLE r356090, <12.1-RELEASE-p3, <12.1-STABLE r356089

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.