CVE-2019-15880

In FreeBSD 12.1-STABLE before r356911, and 12.1-RELEASE before p5, insufficient checking in the cryptodev module allocated the size of a kernel buffer based on a user-supplied length allowing an unprivileged process to trigger a kernel panic.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*

History

26 Apr 2022, 19:54

Type Values Removed Values Added
References (CONFIRM) https://security.netapp.com/advisory/ntap-20200518-0008/ - (CONFIRM) https://security.netapp.com/advisory/ntap-20200518-0008/ - Third Party Advisory
CWE CWE-20

Information

Published : 2020-05-13 16:15

Updated : 2024-02-04 21:00


NVD link : CVE-2019-15880

Mitre link : CVE-2019-15880

CVE.ORG link : CVE-2019-15880


JSON object : View

Products Affected

freebsd

  • freebsd
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-20

Improper Input Validation