CVE-2019-5606

In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r349806, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, code which handles close of a descriptor created by posixopenpt fails to undo a signal configuration. This causes ...

CVE-2019-5606

Removed by vendor...

CVE-2019-5607

This CVE affects FreeBSD: 12.0-STABLE before r350222, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350223, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12. The flaw is a rights transfer over UNIX-domain sockets where, on transmission error, references acq...

CVE-2019-5607

In FreeBSD 12.0-STABLE before r350222, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350223, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, rights transmitted over a domain socket did not properly release a reference on transmission error allowing a...

CVE-2019-5604

CVE-2019-5604 affects FreeBSD’s bhyve XHCI emulated device. The underlying issue is in the function pci_xhci_device_doorbell(), which does not validate the guest-provided values for the identifiers ‘epid’ and ‘streamid’, allowing an out-of-bounds read. Impact: a misbehaving bhyve guest could cras...

CVE-2019-5604

In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, the emulated XHCI device included with the bhyve hypervisor did not properly validate data provided by the guest,...

CVE-2019-5603

In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350263, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, system calls operating on file descriptors as part of mqueuefs did not properly release the reference allowing a...

CVE-2019-5603

Removed by vendor...

CVE-2019-5603

CVE-2019-5603 affects FreeBSD’s mqueuefs (POSIX message queue filesystem). The issue arises when system calls operating on file descriptors obtain a reference to a relevant struct file, but due to a programming error the reference is not always released, allowing a local user to overflow the coun...

CVE-2019-5605

In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient initialization of memory copied to userland in the freebsd32ioctl interface, small amounts of kernel memory may be disclosed to userland processes. This may...

CVE-2019-5605

CVE-2019-5605 affects FreeBSD with kernel memory disclosure via the 32-bit ioctl path (freebsd32_ioctl). The root cause is insufficient initialization of memory copied to userland, allowing a local attacker to read small portions of kernel memory, which could contain sensitive data such as file c...

CVE-2019-5605

Removed by vendor...

FreeBSD : Exim -- RCE in ${sort} expansion (3e0da406-aece-11e9-8d41-97657151f8c2)

Exim team report : A local or remote attacker can execute programs with root privileges - if you've an unusual configuration. If your configuration uses the $sort expansion for items that can be controlled by an attacker e.g. $localpart, $domain. The default config, as shipped by the Exim...

FreeBSD pts resource management error vulnerability

FreeBSD is a Unix-like operating system from the FreeBSD Foundation. pts is a pseudo-terminal driver used in it. A security vulnerability exists in FreeBSD pts. An attacker can exploit this vulnerability to cause a denial of service and possibly run code...

FreeBSD mqueuefs Privilege Access Control Issue Vulnerability

FreeBSD is a Unix-like operating system from the FreeBSD Foundation. mqueuefs is a POSIX message queue file system support module used in it. A security vulnerability exists in FreeBSD mqueuefs. This vulnerability can be exploited by a local attacker to gain access to files, directories, network...

FreeBSD bhyve buffer overflow vulnerability

FreeBSD is a Unix-like operating system from the FreeBSD Foundation. bhyve is a virtual machine hypervisor used in it. A security vulnerability exists in FreeBSD bhyve that stems from the 'pcixhcidevicedoorbell' function failing to validate the supplied 'epid' and 'streamid'. An attacker could...

FreeBSD elevation of privilege vulnerability (CNVD-2019-26771)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. An elevation of privilege vulnerability exists in FreeBSD. A local attacker can exploit this vulnerability to gain root access...

FreeBSD freebsd32 Information Disclosure Vulnerability

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD freebsd32. A local attacker can exploit this vulnerability to read the contents of a portion of kernel memory...

FreeBSD-SA-19:16.bhyve

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:16.bhyve Security Advisory The FreeBSD Project Topic: Bhyve out-of-bounds read in XHCI device Category: core Module: bhyve Announced: 2019-07-24 Credits: Ren...

FreeBSD-SA-19:15.mqueuefs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:15.mqueuefs Security Advisory The FreeBSD Project Topic: Reference count overflow in mqueue filesystem Category: core Module: kernel Announced: 2019-07-24...