{"affected":[{"affectedData":[{"product":"FreeBSD","vendor":"FreeBSD","versions":[{"status":"affected","version":"FreeBSD 11.2 before 11.2-RELEASE-p9 and 12.0 before 12.0-RELEASE-p3"}]}],"source":"secteam@freebsd.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:freebsd:freebsd:11.2:*:*:*:*:*:*:*","matchCriteriaId":"B67A5F4F-218A-4FF6-8D56-59AF47297545","vulnerable":true},{"criteria":"cpe:2.3:a:freebsd:freebsd:12.0:*:*:*:*:*:*:*","matchCriteriaId":"BBEF2C42-0893-4F37-ADFA-F6355ADE4F3D","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not properly sanitized before return from system calls, potentially allowing some kernel data used in the system call to be exposed."},{"lang":"es","value":"En FreeBSD, en versiones anteriores a la 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781) y 12.0-RELEASE-p3, los registros callee-save del kernel no se sanean correctamente antes de volver de las llamadas del sistema, lo que podría permitir que se expongan algunos datos del kernel empleados en la llamada del sistema."}],"id":"CVE-2019-5595","lastModified":"2026-06-17T02:37:54.613","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-02-12T05:29:00.757","references":[{"source":"secteam@freebsd.org","tags":["Patch","Vendor Advisory"],"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-19:01.syscall.asc"},{"source":"nvd@nist.gov","tags":["Third Party Advisory"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/156624"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-19:01.syscall.asc"}],"sourceIdentifier":"secteam@freebsd.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-459"}],"source":"nvd@nist.gov","type":"Primary"}]}