CVE-2019-5596

Related Files

FreeBSD fd Privilege Escalation

Posted Dec 30, 2019

Authored by Karsten Konig

Local root exploit for the FreeBSD fd vulnerability as disclosed in FreeBSD-SA-19:02.fd.

tags | exploit, local, root

systems | freebsd, bsd

advisories | CVE-2019-5596

SHA-256 | 05adfc97defa9b66032601dddbc7174d89d7c42893b3449bce122d3043b86df0

Download | Favorite | View

FreeBSD Security Advisory - FreeBSD-SA-19:02.fd

Posted Feb 6, 2019

Authored by Peter Holm | Site security.freebsd.org

FreeBSD Security Advisory - FreeBSD 12.0 attempts to handle the case where the receiving process does not provide a sufficiently large buffer for an incoming control message containing rights. In particular, to avoid leaking the corresponding descriptors into the receiving process' descriptor table, the kernel handles the truncation case by closing descriptors referenced by the discarded message. The code which performs this operation failed to release a reference obtained on the file corresponding to a received right. This bug can be used to cause the reference counter to wrap around and free the file structure. A local user can exploit the bug to gain root privileges or escape from a jail.

tags | advisory, kernel, local, root

systems | freebsd

advisories | CVE-2019-5596

SHA-256 | 855f095edd8dddc5d144dfb14428d131335a8466a40afb0a5c40cf8aee8b1767

Download | Favorite | View