VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 3, 2019· Updated Jun 17, 2026

CVE-2019-5602

CVE-2019-5602

Description

In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the cdrom driver allows users with read access to the cdrom device to arbitrarily overwrite kernel memory when media is present thereby allowing a malicious user in the operator group to gain root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21
  • FreeBSD/FreeBSD20 versions
    cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*+ 19 more
    • cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:rc3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*
    • (no CPE)range: <12.0-RELEASE-p7, <11.3-RC3-p1, <11.2-RELEASE-p11
    • (no CPE)range: FreeBSD 12.0 before 12.0-RELEASE-p7 and 11.2 before 11.2-RELEASE-p11
  • FreeBSD/cdrom driverllm-create
    Range: <12.0-RELEASE-p7, <11.3-RC3-p1, <11.2-RELEASE-p11

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.