PT-2019-17768 · Freebsd · Freebsd

Publicado 2019-02-05 · Atualizado 2021-07-21 · CVE-2019-5595

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.2-STABLE(r343782) FreeBSD versions prior to 11.2-RELEASE-p9 FreeBSD versions prior to 12.0-STABLE(r343781) FreeBSD versions prior to 12.0-RELEASE-p3

Description The issue is related to the improper sanitization of kernel callee-save registers before return from system calls. This could potentially allow some kernel data used in the system call to be exposed.

Recommendations For versions prior to 11.2-STABLE(r343782), update to 11.2-STABLE(r343782) or later. For versions prior to 11.2-RELEASE-p9, update to 11.2-RELEASE-p9 or later. For versions prior to 12.0-STABLE(r343781), update to 12.0-STABLE(r343781) or later. For versions prior to 12.0-RELEASE-p3, update to 12.0-RELEASE-p3 or later.

Correção

Enumeração de Fraquezas

CWE-459

Identificadores relacionados

CVE-2019-5595

FREEBSD-SA-19_01

Produtos afetados

Freebsd

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/156624 · Nota
• https://security.freebsd.org/advisories/FreeBSD-SA-19:01.syscall.asc · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5595 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5595 · Aviso do Fabricante