CVE-2019-15879

Published May 13, 2020

Last updated 4 years ago

CVSS high 7.4

Overview

Description: In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptodev module permitted a data structure in the kernel to be used after it was freed, allowing an unprivileged process can overwrite arbitrary kernel memory.
Source: secteam@freebsd.org
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.4
Impact score: 5.2
Exploitability score: 2.2
Vector string: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 5.8
Impact score: 4.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-362

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F35957CE-AF9F-40CA-BDD1-FA6A0E73783F"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EA929713-B797-494A-853D-C121D9D69519"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3C3D8EDC-91D3-45B2-AC1D-EF4346D4A714"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EA5006FF-06A5-4D95-BF5B-29F26248D11F"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A705031B-FD63-4076-B92E-E826E11D7111"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "11C1EFB1-68E5-45F4-A7E1-744574F290D1"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "25F649A7-9265-4552-8934-BCE083363982"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F202C856-5B95-4796-AC4A-1F210E7BAB8F"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9419C866-C478-4CDE-A9A1-E592D8FF0933"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD730B6A-F123-4685-ACB3-4F20AAAB77F3"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "508150E3-2C0C-4EEB-BFC9-BB5CEB404C06"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B5D692EF-A5D7-430E-91BA-4CD137343B66"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D50C60A7-4C9F-4636-92E9-9F5B8B01BE5B"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6C49F6C7-A740-42F4-93BB-512CBF334516"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Social media

Configurations

References