Vulnerability Name:

CVE-2019-5602 (CCN-163335)

Assigned:2019-07-02
Published:2019-07-02
Updated:2020-08-24
Summary:In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the cdrom driver allows users with read access to the cdrom device to arbitrarily overwrite kernel memory when media is present thereby allowing a malicious user in the operator group to gain root privileges.
CVSS v3 Severity:8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
7.7 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
8.8 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
7.7 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:9.0 High (CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
9.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-787
CWE-863
Vulnerability Consequences:Gain Privileges
References:Source: MITRE
Type: CNA
CVE-2019-5602

Source: MISC
Type: Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/153522/FreeBSD-Security-Advisory-FreeBSD-SA-19-11.cd_ioctl.html

Source: XF
Type: UNKNOWN
freebsd-cve20195602-priv-esc(163335)

Source: FREEBSD
Type: Vendor Advisory
FreeBSD-SA-19:11

Source: CCN
Type: FreeBSD-SA-19:11.cd_ioctl
Privilege escalation in cd(4) driver

Vulnerable Configuration:Configuration 1:
  • cpe:/o:freebsd:freebsd:11.2:-:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:11.2:p10:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:11.3:rc3:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:12.0:-:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*
  • OR cpe:/o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:freebsd:freebsd:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    freebsd freebsd 11.2 -
    freebsd freebsd 11.2 p10
    freebsd freebsd 11.2 p2
    freebsd freebsd 11.2 p3
    freebsd freebsd 11.2 p4
    freebsd freebsd 11.2 p5
    freebsd freebsd 11.2 p6
    freebsd freebsd 11.2 p7
    freebsd freebsd 11.2 p9
    freebsd freebsd 11.2 rc3
    freebsd freebsd 11.3 rc3
    freebsd freebsd 12.0 -
    freebsd freebsd 12.0 p1
    freebsd freebsd 12.0 p2
    freebsd freebsd 12.0 p3
    freebsd freebsd 12.0 p4
    freebsd freebsd 12.0 p5
    freebsd freebsd 12.0 p6
    freebsd freebsd *