CVE-2019-5596
HIGHFreeBSD 11.2-STABLE, 12.0-STABLE < r343781, 12.0-RELEASE < p3 - Privilege Escalation via UNIX Domain Socket
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2019-5596. PoCs published by Karsten König, gr4yf0x, raymontag.
AI-analyzed exploit summary This exploit leverages a use-after-free vulnerability in FreeBSD's file descriptor handling to achieve local privilege escalation. It manipulates file descriptors and dirty buffers to corrupt kernel memory, ultimately allowing an attacker to overwrite critical files like /etc/libmap.conf.
Description
In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the reference count implementation for UNIX domain sockets can cause a file structure to be incorrectly released potentially allowing a malicious local user to gain root privileges or escape from a jail.
Exploits (3)
This exploit leverages a use-after-free vulnerability in FreeBSD's file descriptor handling to achieve local privilege escalation. It manipulates file descriptors and dirty buffers to corrupt kernel memory, ultimately allowing an attacker to overwrite critical files like /etc/libmap.conf.
This exploit targets a use-after-free vulnerability in FreeBSD's file descriptor handling (CVE-2019-5596). It manipulates file descriptors and leverages race conditions to achieve local privilege escalation by corrupting kernel memory structures.
This is a privilege escalation exploit for FreeBSD (CVE-2019-5596) leveraging a use-after-free vulnerability in the file descriptor handling mechanism. The exploit uses a combination of multithreading, file operations, and socket manipulation to trigger the vulnerability and achieve root access.
References (2)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H