Unrated severityNVD Advisory· Published Jul 26, 2019· Updated Aug 4, 2024

CVE-2019-5605

Description

In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient initialization of memory copied to userland in the freebsd32_ioctl interface, small amounts of kernel memory may be disclosed to userland processes. This may allow an attacker to leverage this information to obtain elevated privileges either directly or indirectly.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeBSD/FreeBSDllm-fuzzy2 versions
11.2-RELEASE < 11.2-RELEASE-p12, 11.3-RELEASE < 11.3-RELEASE-p1, 11.3-STABLE < r350217+ 1 more
- (no CPE)range: 11.2-RELEASE < 11.2-RELEASE-p12, 11.3-RELEASE < 11.3-RELEASE-p1, 11.3-STABLE < r350217
- (no CPE)range: FreeBSD 11.x

Patches

Vulnerability mechanics

References

security.freebsd.org/advisories/FreeBSD-SA-19:14.freebsd32.ascmitrevendor-advisoryx_refsource_FREEBSD
packetstormsecurity.com/files/153749/FreeBSD-Security-Advisory-FreeBSD-SA-19-14.freebsd32.htmlmitrex_refsource_MISC
security.netapp.com/advisory/ntap-20190814-0003/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000