CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Permissions Privileges and Access Controls
Summary: in freebsd 12.0-stable before r349628, 12.0-release before 12.0-release-p7, 11.3-prerelease before r349629, 11.3-rc3 before 11.3-rc3-p1, and 11.2-release before 11.2-release-p11, a bug in the cdrom driver allows users with read access to the cdrom device to arbitrarily overwrite kernel memory when media is present thereby allowing a malicious user in the operator group to gain root privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-07-03
Last Modified Date: 2019-07-15