Improper Initialization Affecting freebsd package, versions [0,]


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.2% (59th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UNMANAGED-FREEBSD-2383069
  • published26 Jan 2022
  • disclosed26 Jul 2019
  • creditUnknown

Introduced: 26 Jul 2019

CVE-2019-5605  (opens in a new tab)
CWE-665  (opens in a new tab)

How to fix?

There is no fixed version for freebsd.

Overview

Affected versions of this package are vulnerable to Improper Initialization. In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient initialization of memory copied to userland in the freebsd32_ioctl interface, small amounts of kernel memory may be disclosed to userland processes. This may allow an attacker to leverage this information to obtain elevated privileges either directly or indirectly.

CVSS Scores

version 3.1