Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-5544 State: PUBLISHED Published: 2019-12-06T15:54:18.000Z Last Updated: 2025-10-21T23:35:56.590Z Vendors: n/a Products: ESXi and Horizon DaaS Problem Types: Heap Overwrite Description: OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.vmware.com/security/advisories/VMSA-2019-0022.html - http://www.openwall.com/lists/oss-security/2019/12/10/2 - http://www.openwall.com/lists/oss-security/2019/12/11/2 - https://access.red
nwall.com/lists/oss-security/2019/12/10/2 - http://www.openwall.com/lists/oss-security/2019/12/11/2 - https://access.redhat.com/errata/RHSA-2019:4240 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPXXJZLPLAQULBCJVI5NNWZ3PGWXGXWG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DA3LYAJ2NRKMOZLZOQNDJ5TNQRFMWGHF/ - https://access.redhat.com/errata/RHSA-2020:0199 - https://security.gentoo.org/glsa/202005-12
CVE ID: CVE-2019-5546 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5547 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5548 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5549 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5550 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5551 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5552 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5553 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5554 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5555 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5556 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5557 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5558 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5559 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5560 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5561 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5562 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5563 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5564 State: REJECTED Published: 2019-12-23T20:41:32 Last Updated: 2019-12-23T20:41:32 Description: No description available.
CVE ID: CVE-2019-5565 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5566 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5567 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5568 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5569 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5570 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5571 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5572 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5573 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5574 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5575 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5576 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5577 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5578 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5579 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5580 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5581 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5582 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5583 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5584 State: REJECTED Published: 2019-12-23T20:41:33 Last Updated: 2019-12-23T20:41:33 Description: No description available.
CVE ID: CVE-2019-5585 State: PUBLISHED Published: 2019-04-09T20:57:14 Last Updated: 2024-10-25T14:07:15.479Z Vendors: Fortinet Products: FortiClientMac Problem Types: Denial of service Description: An improper access control vulnerability in FortiClientMac before 6.0.5 may allow an attacker to affect the application's performance via modifying the contents of a file used by several FortiClientMac processes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/107693 - https://fortiguard.com/advisory/FG-IR-19-003
CVE ID: CVE-2019-5586 State: PUBLISHED Published: 2019-06-04T21:39:52 Last Updated: 2024-10-25T14:06:19.112Z Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Execute unauthorized code or commands Description: A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.2.0 to 5.6.10, 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "param" parameter of the error process HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-19-034 - http://www.securityfocus.com/bid/108610
CVE ID: CVE-2019-5587 State: PUBLISHED Published: 2019-06-04T21:35:03 Last Updated: 2024-10-25T14:06:29.918Z Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Execute unauthorized code or commands Description: Lack of root file system integrity checking in Fortinet FortiOS VM application images all versions below 6.0.5 may allow attacker to implant malicious programs into the installing image by reassembling the image through specific methods. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-19-017 - http://www.securityfocus.com/bid/108628
CVE ID: CVE-2019-5588 State: PUBLISHED Published: 2019-06-04T21:43:15 Last Updated: 2024-10-25T14:06:08.583Z Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Execute unauthorized code or commands Description: A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4 under SSL VPN web portal may allow an attacker to execute unauthorized malicious script code via the "err" parameter of the error process HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-19-034 - http://www.securityfocus.com/bid/108618
CVE ID: CVE-2019-5589 State: PUBLISHED Published: 2019-05-28T21:42:19 Last Updated: 2024-10-25T14:30:07.426Z Vendors: Fortinet Products: Fortinet FortiClient for Windows Problem Types: Unauthorized code execution Description: An Unsafe Search Path vulnerability in FortiClient Online Installer (Windows version before 6.0.6) may allow an unauthenticated, remote attacker with control over the directory in which FortiClientOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious .dll files in that directory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-19-060
CVE ID: CVE-2019-5590 State: PUBLISHED Published: 2019-08-28T16:45:15 Last Updated: 2024-10-25T14:05:31.381Z Vendors: Fortinet Products: FortiWeb Problem Types: Execute unauthorized code or commands Description: The URL part of the report message is not encoded in Fortinet FortiWeb 6.0.2 and below which may allow an attacker to execute unauthorized code or commands (Cross Site Scripting) via attack reports generated in HTML form. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/108786 - https://fortiguard.com/advisory/FG-IR-19-070
CVE ID: CVE-2019-5591 State: PUBLISHED Published: 2020-08-14T15:28:25.000Z Last Updated: 2025-10-21T23:35:38.280Z Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Information disclosure Description: A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fortiguard.com/psirt/FG-IR-19-037
CVE ID: CVE-2019-5592 State: PUBLISHED Published: 2019-08-23T19:52:17 Last Updated: 2024-10-25T14:05:55.461Z Vendors: n/a Products: Fortinet IPS Engine Problem Types: Information disclosure Description: Multiple padding oracle vulnerabilities (Zombie POODLE, GOLDENDOODLE, OpenSSL 0-length) in the CBC padding implementation of FortiOS IPS engine version 5.000 to 5.006, 4.000 to 4.036, 4.200 to 4.219, 3.547 and below, when configured with SSL Deep Inspection policies and with the IPS sensor enabled, may allow an attacker to decipher TLS connections going through the FortiGate via monitoring the traffic in a Man-in-the-middle position. Additional Analyst Notes: - CVE Program Container: - CISA A
via monitoring the traffic in a Man-in-the-middle position. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-19-145
CVE ID: CVE-2019-5593 State: PUBLISHED Published: 2020-01-23T16:50:43 Last Updated: 2024-10-25T14:04:22.039Z Vendors: n/a Products: Fortinet FortiOS Problem Types: Information disclosure Description: Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6, 5.6.10 and below or for user uploaded local certificates via setting an empty password in FortiOS 6.2.1, 6.2.0, 6.0.6 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/p
elow. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-19-134
CVE ID: CVE-2019-5594 State: PUBLISHED Published: 2019-08-23T20:10:54 Last Updated: 2024-10-25T14:05:42.451Z Vendors: n/a Products: Fortinet FortiNAC Problem Types: Execute unauthorized code or commands Description: An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-19-140
CVE ID: CVE-2019-5595 State: PUBLISHED Published: 2019-02-12T05:00:00 Last Updated: 2024-08-04T20:01:51.447Z Vendors: FreeBSD Products: FreeBSD Problem Types: Improper Cross-boundary Removal of Sensitive Data Description: In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not properly sanitized before return from system calls, potentially allowing some kernel data used in the system call to be exposed. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:01.syscall.asc
CVE ID: CVE-2019-5596 State: PUBLISHED Published: 2019-02-12T05:00:00 Last Updated: 2024-08-04T20:01:51.303Z Vendors: FreeBSD Products: FreeBSD Problem Types: Improper Update of Reference Count Description: In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the reference count implementation for UNIX domain sockets can cause a file structure to be incorrectly released potentially allowing a malicious local user to gain root privileges or escape from a jail. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:02.fd.asc - http://packetstormsecur
ogram Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:02.fd.asc - http://packetstormsecurity.com/files/155790/FreeBSD-fd-Privilege-Escalation.html
CVE ID: CVE-2019-5597 State: PUBLISHED Published: 2019-05-15T15:27:22 Last Updated: 2024-08-04T20:01:51.289Z Vendors: n/a Products: FreeBSD Problem Types: Improper Check for Unusual or Exceptional Conditions Description: In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in the pf IPv6 fragment reassembly logic incorrectly uses the last extension header offset from the last received packet instead of the first packet allowing maliciously crafted IPv6 packets to cause a crash or potentially bypass the packet filter. Additional Analyst Notes: - CVE Program Container: References: - https://security.Free
ntially bypass the packet filter. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:05.pf.asc - https://www.synacktiv.com/ressources/Synacktiv_OpenBSD_PacketFilter_CVE-2019-5597_ipv6_frag.pdf - http://packetstormsecurity.com/files/152933/FreeBSD-Security-Advisory-FreeBSD-SA-19-05.pf.html - http://www.securityfocus.com/bid/108395 - https://security.netapp.com/advisory/ntap-20190611-0001/ - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
CVE ID: CVE-2019-5598 State: PUBLISHED Published: 2019-05-15T15:27:30.000Z Last Updated: 2025-04-03T06:03:59.522Z Vendors: n/a Products: FreeBSD Problem Types: Improper Check for Unusual or Exceptional Conditions Description: In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in pf does not check if the outer ICMP or ICMP6 packet has the same destination IP as the source IP of the inner protocol packet allowing a maliciously crafted ICMP/ICMP6 packet could bypass the packet filter rules and be passed to a host that would otherwise be unavailable. Additional Analyst Notes: - CVE Program Co
ket filter rules and be passed to a host that would otherwise be unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:06.pf.asc - https://www.synacktiv.com/posts/systems/icmp-reachable.html - http://packetstormsecurity.com/files/152934/FreeBSD-Security-Advisory-FreeBSD-SA-19-06.pf.html - http://www.securityfocus.com/bid/108395 - https://security.netapp.com/advisory/ntap-20190611-0001/ - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
CVE ID: CVE-2019-5599 State: PUBLISHED Published: 2019-07-02T20:02:17 Last Updated: 2024-08-04T20:01:51.990Z Vendors: n/a Products: FreeBSD Problem Types: Kernel resource exhaustion in network stack Description: In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attacker to cause several linked lists to grow unbounded and cause an expensive list traversal on every packet being processed, leading to resource exhaustion and a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2019/06/17/5 - https://github.com/Netflix/security-bulletins/blo
eferences: - http://www.openwall.com/lists/oss-security/2019/06/17/5 - https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md - http://packetstormsecurity.com/files/153329/Linux-FreeBSD-TCP-Based-Denial-Of-Service.html - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:08.rack.asc - https://www.kb.cert.org/vuls/id/905115 - https://seclists.org/bugtraq/2019/Jun/27 - http://packetstormsecurity.com/files/153378/FreeBSD-Security-Advisory-FreeBSD-SA-19-08.rack.html - https://support.f5.com/csp/article/K75521003 - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193 - https://security.netapp.com/advisory/ntap-20190625-0004/
CVE ID: CVE-2019-5600 State: PUBLISHED Published: 2019-07-03T18:50:23 Last Updated: 2024-08-04T20:01:52.231Z Vendors: FreeBSD Products: FreeBSD Problem Types: Buffer overflow in iconv Description: In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in iconv implementation may allow an attacker to write past the end of an output buffer. Depending on the implementation, an attacker may be able to create a denial of service, provoke incorrect program behavior, or induce a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https
gram behavior, or induce a remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:09.iconv.asc - http://packetstormsecurity.com/files/153520/FreeBSD-Security-Advisory-FreeBSD-SA-19-09.iconv.html
CVE ID: CVE-2019-5601 State: PUBLISHED Published: 2019-07-03T18:51:47 Last Updated: 2024-08-04T20:01:52.130Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel information leakage Description: In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the FFS implementation causes up to three bytes of kernel stack memory to be written to disk as uninitialized directory entry padding. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:10.ufs.asc - http://packetstormsecurity.com/files/153523/FreeBSD-Security-Advisory-FreeBSD-S
rg/advisories/FreeBSD-SA-19:10.ufs.asc - http://packetstormsecurity.com/files/153523/FreeBSD-Security-Advisory-FreeBSD-SA-19-10.ufs.html
CVE ID: CVE-2019-5602 State: PUBLISHED Published: 2019-07-03T18:52:45 Last Updated: 2024-08-04T20:01:51.518Z Vendors: FreeBSD Products: FreeBSD Problem Types: Privilege escalation Description: In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the cdrom driver allows users with read access to the cdrom device to arbitrarily overwrite kernel memory when media is present thereby allowing a malicious user in the operator group to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeB
ivileges. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:11.cd_ioctl.asc - http://packetstormsecurity.com/files/153522/FreeBSD-Security-Advisory-FreeBSD-SA-19-11.cd_ioctl.html
CVE ID: CVE-2019-5603 State: PUBLISHED Published: 2019-07-26T00:16:10 Last Updated: 2024-08-04T20:01:51.991Z Vendors: FreeBSD Products: FreeBSD Problem Types: Kernel improper update of reference count Description: In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350263, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, system calls operating on file descriptors as part of mqueuefs did not properly release the reference allowing a malicious user to overflow the counter allowing access to files, directories, and sockets opened by processes owned by other users. Additional Analyst Notes: - CVE Program Container: Referen
tories, and sockets opened by processes owned by other users. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:15.mqueuefs.asc - http://packetstormsecurity.com/files/153752/FreeBSD-Security-Advisory-FreeBSD-SA-19-15.mqueuefs.html - https://security.netapp.com/advisory/ntap-20190814-0003/ - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:24.mqueuefs.asc - https://seclists.org/bugtraq/2019/Aug/35 - http://packetstormsecurity.com/files/154172/FreeBSD-Security-Advisory-FreeBSD-SA-19-24.mqueuefs.html
CVE ID: CVE-2019-5604 State: PUBLISHED Published: 2019-07-26T00:24:10 Last Updated: 2024-08-04T20:01:52.138Z Vendors: FreeBSD Products: FreeBSD Problem Types: Out of bounds read Description: In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, the emulated XHCI device included with the bhyve hypervisor did not properly validate data provided by the guest, allowing an out-of-bounds read. This provides a malicious guest the possibility to crash the system or access system memory. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeB
system or access system memory. Additional Analyst Notes: - CVE Program Container: References: - https://security.FreeBSD.org/advisories/FreeBSD-SA-19:16.bhyve.asc - http://packetstormsecurity.com/files/153753/FreeBSD-Security-Advisory-FreeBSD-SA-19-16.bhyve.html - https://security.netapp.com/advisory/ntap-20190814-0003/