vulnerability

FreeBSD: VID-53b3474c-f680-11e9-a87f-a4badb2f4699 (CVE-2019-5603): FreeBSD -- Reference count overflow in mqueue filesystem 32-bit compat

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Oct 24, 2019
Added
Oct 24, 2019
Modified
Dec 10, 2025

Description

Problem Description: System calls operating on file descriptors obtain a reference to relevant struct file which due to a programming error was not always put back, which in turn could be used to overflow the counter of affected struct file. Impact: A local user can use this flaw to obtain access to files, directories, sockets, etc., opened by processes owned by other users. If obtained struct file represents a directory from outside of user's jail, it can be used to access files outside of the jail. If the user in question is a jailed root they can obtain root privileges on the host system.

Solutions

freebsd-upgrade-base-12_0-release-p10freebsd-upgrade-base-11_3-release-p3freebsd-upgrade-base-11_2-release-p14freebsd-upgrade-base-12_0-release-p8freebsd-upgrade-base-11_2-release-p12freebsd-upgrade-base-11_3-release-p1
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.