Medium severity6.5NVD Advisory· Published Jul 26, 2019· Updated Jun 17, 2026
CVE-2019-5605
CVE-2019-5605
Description
In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient initialization of memory copied to userland in the freebsd32_ioctl interface, small amounts of kernel memory may be disclosed to userland processes. This may allow an attacker to leverage this information to obtain elevated privileges either directly or indirectly.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16cpe:2.3:o:freebsd:freebsd:11.0:-:*:*:*:*:*:*+ 15 more
- cpe:2.3:o:freebsd:freebsd:11.0:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p11:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
- (no CPE)range: <11.3-RELEASE-p1, <11.2-RELEASE-p12
- (no CPE)range: FreeBSD 11.x
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/153749/FreeBSD-Security-Advisory-FreeBSD-SA-19-14.freebsd32.htmlnvdThird Party AdvisoryVDB Entry
- security.freebsd.org/advisories/FreeBSD-SA-19:14.freebsd32.ascnvdVendor Advisory
- security.netapp.com/advisory/ntap-20190814-0003/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.