vulnerability

FreeBSD: VID-3c10ccdf-6a09-11ea-92ab-00163e433440 (CVE-2019-15876): FreeBSD -- Insufficient oce(4) ioctl(2) privilege checking

Try Surface Command
Back to search
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:N)
Published
Mar 19, 2020
Added
Mar 20, 2020
Modified
Dec 10, 2025

Description

Problem Description: The driver-specific ioctl(2) command handlers in oce(4) failed to check whether the caller has sufficient privileges to perform the corresponding operation. Impact: The oce(4) handler permits unprivileged users to send passthrough commands to device firmware.

Solutions

freebsd-upgrade-base-12_1-release-p3freebsd-upgrade-base-11_3-release-p7

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today