Vulnerability Details CVE-2018-6919
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may be disclosed to userland processes. Unprivileged users may be able to access small amounts privileged kernel data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.6%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2018-6919
-
cpe:2.3:o:freebsd:freebsd:10.0
-
cpe:2.3:o:freebsd:freebsd:10.1
-
cpe:2.3:o:freebsd:freebsd:10.2
-
cpe:2.3:o:freebsd:freebsd:10.3
-
cpe:2.3:o:freebsd:freebsd:11.0