vulnerability
FreeBSD: VID-53b3474c-f680-11e9-a87f-a4badb2f4699 (CVE-2019-5603): FreeBSD -- Reference count overflow in mqueue filesystem 32-bit compat
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | Oct 24, 2019 | Oct 24, 2019 | Dec 10, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Oct 24, 2019
Added
Oct 24, 2019
Modified
Dec 10, 2025
Description
Problem Description: System calls operating on file descriptors obtain a reference to relevant struct file which due to a programming error was not always put back, which in turn could be used to overflow the counter of affected struct file. Impact: A local user can use this flaw to obtain access to files, directories, sockets, etc., opened by processes owned by other users. If obtained struct file represents a directory from outside of user's jail, it can be used to access files outside of the jail. If the user in question is a jailed root they can obtain root privileges on the host system.
Solutions
freebsd-upgrade-base-12_0-release-p10freebsd-upgrade-base-11_3-release-p3freebsd-upgrade-base-11_2-release-p14freebsd-upgrade-base-12_0-release-p8freebsd-upgrade-base-11_2-release-p12freebsd-upgrade-base-11_3-release-p1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.