ByteOS Network

CVE Vulnerability Details :

CVE-2019-5604

PUBLISHED

More Info Official Page

Assigner-freebsd

Assigner Org ID-63664ac6-956c-4cba-a5d0-f46076e16109

Published At-26 Jul, 2019 | 00:24

Updated At-04 Aug, 2024 | 20:01

▼CVE Numbering Authority (CNA)

In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, the emulated XHCI device included with the bhyve hypervisor did not properly validate data provided by the guest, allowing an out-of-bounds read. This provides a malicious guest the possibility to crash the system or access system memory.

Affected Products

Vendor

FreeBSD Foundation

Product

FreeBSD

Versions

Affected

FreeBSD before 12.0-RELEASE-p8
before 11.3-RELEASE-p1
and before 11.2-RELEASE-p12

Problem Types

Type	CWE ID	Description
text	N/A	Out of bounds read

References

Hyperlink	Resource
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:16.bhyve.asc	vendor-advisory x_refsource_FREEBSD
http://packetstormsecurity.com/files/153753/FreeBSD-Security-Advisory-FreeBSD-SA-19-16.bhyve.html	x_refsource_MISC
https://security.netapp.com/advisory/ntap-20190814-0003/	x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:16.bhyve.asc	vendor-advisory x_refsource_FREEBSD x_transferred
http://packetstormsecurity.com/files/153753/FreeBSD-Security-Advisory-FreeBSD-SA-19-16.bhyve.html	x_refsource_MISC x_transferred
https://security.netapp.com/advisory/ntap-20190814-0003/	x_refsource_CONFIRM x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References