CVE-2019-15879

Katalog CVE

CVSS 7.4 · High EPSS 0,66%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada freebsd. Skor CVSS 3.1 7.4 (High) menurut NVD.

Deskripsi (NVD)

In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptodev module permitted a data structure in the kernel to be used after it was freed, allowing an unprivileged process can overwrite arbitrary kernel memory.

Rincian

Terbit di NVD

13 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.4 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-772: Missing Release of Resource after Effective Lifetime

EPSS (30 hari)

0,66% peluang dieksploitasi; lebih tinggi dari 50,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.FreeBSD.org/advisories/FreeBSD-SA-20:15.cryptodev.asc advisory vendor
• https://security.netapp.com/advisory/ntap-20200518-0005/