| |
Vulnerability CVE-2019-15879
Published: 2020-05-13
| Description: |
In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptodev module permitted a data structure in the kernel to be used after it was freed, allowing an unprivileged process can overwrite arbitrary kernel memory. |
Type:
CWE-772
CVSS2 => (AV:N/AC:M/Au:N/C:N/I:P/A:P)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
5.8/10 |
4.9/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
None |
Partial |
Partial |
References: |
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:15.cryptodev.asc
https://security.netapp.com/advisory/ntap-20200518-0005/
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
