CVE-2019-5602

Опубликовано: 03 июл. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 9

EPSS Низкий

Описание

In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the cdrom driver allows users with read access to the cdrom device to arbitrarily overwrite kernel memory when media is present thereby allowing a malicious user in the operator group to gain root privileges.

Ссылки

http://packetstormsecurity.com/files/153522/FreeBSD-Security-Advisory-FreeBSD-SA-19-11.cd_ioctl.html
Third Party Advisory
VDB Entry
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:11.cd_ioctl.asc
Vendor Advisory
http://packetstormsecurity.com/files/153522/FreeBSD-Security-Advisory-FreeBSD-SA-19-11.cd_ioctl.html
Third Party Advisory
VDB Entry
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:11.cd_ioctl.asc
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.3:rc3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04148

Низкий

8.8 High

CVSS3

9 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2019-5602

CVSS3: 8.8

debian

больше 6 лет назад

In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEAS ...

GHSA-f993-7vhh-q9rj

github

больше 3 лет назад