CVE-2019-5603
- State
- Published
- Severity
- Not scored
- Published
- Jul 26, 2019
- Updated
- Aug 4, 2024
- Reserved
- Jan 7, 2019
Description
In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350263, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, system calls operating on file descriptors as part of mqueuefs did not properly release the reference allowing a malicious user to overflow the counter allowing access to files, directories, and sockets opened by processes owned by other users.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
FreeBSDFreeBSD |
|
References
- FreeBSD-SA-19:15vendor-advisory
- http://packetstormsecurity.com/files/153752/FreeBSD-Security-Advisory-FreeBSD-SA-19-15.mqueuefs.html
- https://security.netapp.com/advisory/ntap-20190814-0003/
- FreeBSD-SA-19:24vendor-advisory
- 20190821 FreeBSD Security Advisory FreeBSD-SA-19:24.mqueuefsmailing-list
- http://packetstormsecurity.com/files/154172/FreeBSD-Security-Advisory-FreeBSD-SA-19-24.mqueuefs.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.