CVE-2019-15875

Published: Feb 18, 2020Modified: Jun 17, 2026

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before 11.3-RELEASE-p6, due to incorrect initialization of a stack data structure, core dump files may contain up to 20 bytes of kernel data previously stored on the stack.

Affected (20)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 11.3
Freebsd Freebsd	Version 11.3 p1
Freebsd Freebsd	Version 11.3 p2
Freebsd Freebsd	Version 11.3 p3
Freebsd Freebsd	Version 11.3 p4
Freebsd Freebsd	Version 11.3 p5
Freebsd Freebsd	Version 12.0
Freebsd Freebsd	Version 12.0 p10
Freebsd Freebsd	Version 12.0 p11
Freebsd Freebsd	Version 12.0 p12
Freebsd Freebsd	Version 12.0 p1
Freebsd Freebsd	Version 12.0 p2
Freebsd Freebsd	Version 12.0 p3
Freebsd Freebsd	Version 12.0 p4
Freebsd Freebsd	Version 12.0 p6
Freebsd Freebsd	Version 12.0 p7
Freebsd Freebsd	Version 12.0 p8
Freebsd Freebsd	Version 12.0 p9
Freebsd Freebsd	Version 12.1
Freebsd Freebsd	Version 12.1 p1

Related CWEs

CWE-665

Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

References (2)

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:03.thrmisc.asc

Source: secteam@freebsd.org

PatchVendor Advisory

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:03.thrmisc.asc

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.