3.3

CVE-2019-15875

In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before 11.3-RELEASE-p6, due to incorrect initialization of a stack data structure, core dump files may contain up to 20 bytes of kernel data previously stored on the stack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version 11.3 Update -
Freebsd ≫ Freebsd Version 11.3 Update p1
Freebsd ≫ Freebsd Version 11.3 Update p2
Freebsd ≫ Freebsd Version 11.3 Update p3
Freebsd ≫ Freebsd Version 11.3 Update p4
Freebsd ≫ Freebsd Version 11.3 Update p5
Freebsd ≫ Freebsd Version 12.0 Update -
Freebsd ≫ Freebsd Version 12.0 Update p1
Freebsd ≫ Freebsd Version 12.0 Update p10
Freebsd ≫ Freebsd Version 12.0 Update p11
Freebsd ≫ Freebsd Version 12.0 Update p12
Freebsd ≫ Freebsd Version 12.0 Update p2
Freebsd ≫ Freebsd Version 12.0 Update p3
Freebsd ≫ Freebsd Version 12.0 Update p4
Freebsd ≫ Freebsd Version 12.0 Update p6
Freebsd ≫ Freebsd Version 12.0 Update p7
Freebsd ≫ Freebsd Version 12.0 Update p8
Freebsd ≫ Freebsd Version 12.0 Update p9
Freebsd ≫ Freebsd Version 12.1 Update -
Freebsd ≫ Freebsd Version 12.1 Update p1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.204
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.3 1.8 1.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:03.thrmisc.asc
Patch
Vendor Advisory