CVE-2019-5601

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-07-03 · updated 2026-06-17
Weakness: CWE-200

Description

In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the FFS implementation causes up to three bytes of kernel stack memory to be written to disk as uninitialized directory entry padding.

Affected products

FreeBSD: 11.2, 11.2-p10, 11.2-p2, 11.2-p3, 11.2-p4, 11.2-p5 (+11)

References

http://packetstormsecurity.com/files/153523/FreeBSD-Security-Advisory-FreeBSD-SA-19-10.ufs.html
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:10.ufs.asc
http://packetstormsecurity.com/files/153523/FreeBSD-Security-Advisory-FreeBSD-SA-19-10.ufs.html
https://security.FreeBSD.org/advisories/FreeBSD-SA-19:10.ufs.asc

Get alerted when CVE-2019-5601 or the next vulnerability affects your stack