CVE-2019-5596

highpriority · attend · 45EPSS 0.012 · 69 %ileexploit · functionalEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

3 exploits · functional

Likely / severe?

1.23% (69th) EPSS

CVSS 7.2 · high

Is it mine?

6 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the reference count implementation for UNIX domain sockets can cause a file structure to be incorrectly released potentially allowing a malicious local user to gain root privileges or escape from a jail.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10

v3.08.8highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2 · impact 6

v3.08.3highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

v3.18.8highAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-264US

exploits (3)

Public proof-of-concept and weaponised exploit code.

EDB-47829FreeBSD-SA-19:02.fd - Privilege Escalationfunctional · exploit_db
EDB-47081FreeBSD 12.0 - 'fd' Local Privilege EscalationPoC · exploit_db
raymontag/CVE-2019-5596Full LPE Exploit for CVE-2019-5596 / FreeBSD-SA-19:02.fdPoC · poc_in_github

affected products (6)

Products and version ranges known to be affected.

FreeBSD FreeBSD≤ FreeBSD 12.0 before 12.0-RELEASE-p3enisa_euvdEU
FreeBSD Project FreeBSD11.2-STABLE r338618 → 11.2-STABLE r343786fstec_bduRU
FreeBSD Project FreeBSD12.0-RELEASE → 12.0-RELEASE-p3fstec_bduRU
FreeBSD Project FreeBSD12.0-STABLE → 12.0-STABLE r343781fstec_bduRU
freebsd freebsd= 11.2nvdUScpe:2.3:a:freebsd:freebsd:*:*:*:*:*:*:*:*
freebsd freebsd= 12.0nvdUScpe:2.3:a:freebsd:freebsd:*:*:*:*:*:*:*:*

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2019-02-12modified 2026-06-17

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan