CVE-2005-2019 Race condition in n/a
Remote attackers can bypass firewall access restrictions due to a race condition in ipfw table lookups on FreeBSD systems with preemption enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-2019?
CVE-2005-2019 is a medium-severity vulnerability in Freebsd Freebsd, published on 30 Jun 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent lookups, allowing remote attackers to bypass intended access restrictions.
Which versions are affected by CVE-2005-2019?
It affects 1 product.
Products include Freebsd Freebsd.
How do I fix CVE-2005-2019?
No fix has been published for CVE-2005-2019 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-2019 being exploited?
There is no known exploitation of CVE-2005-2019 in the wild and no public exploit code.
Other vulnerabilities in Freebsd Freebsd
Sources
Also known as GHSA-gjxh-r9hc-8vp9.