CVE-2019-5606: Use After Free

Published Jul 26, 2019

Updated

In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r349806, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, code which handles close of a descriptor created by posixopenpt fails to undo a signal configuration. This causes an incorrect signal to be raised leading to a write after free of kernel memory allowing a malicious user to gain root privileges or escape a jail.

Affected Software

4 affected components

FreeBSD FreeBSD=11.0

FreeBSD FreeBSD=11.2

FreeBSD FreeBSD=11.3

FreeBSD FreeBSD=12.0

Event History

Jul 26, 2019

CVE Published

via MITRE·12:33 AM

Data Sourced

via MITRE·12:33 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-5606?

CVE-2019-5606 has a medium severity rating, indicating potential risk to system security.

How do I fix CVE-2019-5606?

To remediate CVE-2019-5606, upgrade FreeBSD to version 12.0-RELEASE-p8, 11.3-RELEASE-p1, or 11.2-RELEASE-p12 or later.

What versions of FreeBSD are affected by CVE-2019-5606?

CVE-2019-5606 affects FreeBSD versions 11.0, 11.2, 11.3, and 12.0 prior to specific patch releases.

What types of systems are impacted by CVE-2019-5606?

CVE-2019-5606 affects systems running FreeBSD which utilize posix_openpt for descriptor handling.

What are the consequences of not addressing CVE-2019-5606?

Failing to address CVE-2019-5606 may lead to unstable system behavior and potential security vulnerabilities.