CVE-2019-5596

HIGH

FreeBSD - Privilege Escalation

Title source: llm

Description

In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the reference count implementation for UNIX domain sockets can cause a file structure to be incorrectly released potentially allowing a malicious local user to gain root privileges or escape from a jail.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Karsten König · bashlocalfreebsd
https://www.exploit-db.com/exploits/47829
exploitdb WORKING POC
by gr4yf0x · bashlocalfreebsd
https://www.exploit-db.com/exploits/47081
nomisec WORKING POC 1 stars
by raymontag · poc
https://github.com/raymontag/CVE-2019-5596

Scores

CVSS v3 8.8
EPSS 0.0016
EPSS Percentile 36.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

Status published
Products (2)
freebsd/freebsd 11.2
freebsd/freebsd 12.0
Published Feb 12, 2019
Tracked Since Feb 18, 2026