VYPR
← All advisories
High severity7.8NVD Advisory· Published May 13, 2020· Updated Jun 17, 2026

CVE-2019-15878

CVE-2019-15878

Description

In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local user can trigger a use-after-free situation due to improper checking in SCTP when an application tries to update an SCTP-AUTH shared key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • FreeBSD/FreeBSD11 versions
    cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*+ 10 more
    • cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*
    • (no CPE)range: <=12.1-STABLE before r352509, <=11.3-STABLE before r352509, <=11.3-RELEASE before p9
  • FreeBSD/FreeBSD SCTP moduledescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.