PT-2019-17768 · Freebsd · Freebsd

Published 2019-02-05 · Updated 2021-07-21 · CVE-2019-5595

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.2-STABLE(r343782) FreeBSD versions prior to 11.2-RELEASE-p9 FreeBSD versions prior to 12.0-STABLE(r343781) FreeBSD versions prior to 12.0-RELEASE-p3

Description The issue is related to the improper sanitization of kernel callee-save registers before return from system calls. This could potentially allow some kernel data used in the system call to be exposed.

Recommendations For versions prior to 11.2-STABLE(r343782), update to 11.2-STABLE(r343782) or later. For versions prior to 11.2-RELEASE-p9, update to 11.2-RELEASE-p9 or later. For versions prior to 12.0-STABLE(r343781), update to 12.0-STABLE(r343781) or later. For versions prior to 12.0-RELEASE-p3, update to 12.0-RELEASE-p3 or later.

Fix

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2019-5595

FREEBSD-SA-19_01

Affected Products

Freebsd

References · 4

• https://security.freebsd.org/advisories/FreeBSD-SA-19:01.syscall.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5595 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5595 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/156624 · Note