CVE-2019-5596

In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the reference count implementation for UNIX domain sockets can cause a file structure to be incorrectly released potentially allowing a malicious local user to gain root privileges or escape from a jail.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.23% chance of exploitation in the next 30 days, 67th percentile

Published

2019-02-12

Updated

2024-08-04

Proof-of-concept exploits (1)

• raymontag/CVE-2019-55961★ · 2023-03-29

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/47829
• https://www.exploit-db.com/exploits/47081

References

• CVE Record
• NVD entry

Related

• CVE-2019-2215
• CVE-2019-5603
• CVE-2021-1782
• CVE-2021-29627
• CVE-2019-5591
• CVE-2019-5602