CVE-2019-5608 — Out-of-bounds Read in Freebsd
Severity
9.8CRITICALNVD
EPSS
0.8%
top 25.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 30
Latest updateJul 27
Description
In FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350650, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before 11.2-RELEASE-p13, the ICMPv6 input path incorrectly handles cases where an MLDv2 listener query packet is internally fragmented across multiple mbufs. A remote attacker may be able to cause an out-of-bounds read or write that may cause the kernel to attempt to access an unmapped page and subsequently panic.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages5 packages
▶CVEListV5freebsd/freebsdand before 11.2-RELEASE-p13, before 11.3-RELEASE-p2, before 12.0-RELEASE-p9+2
Also affects: Freebsd 11.2, 11.3, 12.0
Patches
🔴Vulnerability Details
1📋Vendor Advisories
5Apple▶
CVE-2019-5608: macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra↗2019-03-25