ID:8948 - Exploit for Buffer overflow in FreeBSD - CVE-2019-5596

Link to public exploit:

Vulnerability description

The vulnerability allows a local attacker to escalate privileges on the system.

The vulnerability exists in /dev/fd/due to the application attempts to handle the case where the receiving process does not provide a sufficiently large buffer for an incoming control message containing rights. A local attacker can cause the reference counter to wrap around and free the file structure and gain root privileges.

Remediation