CVE-2019-5600 - CVE House
Back to Database
Status published Critical CVE-2019-5600

In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before...

Vulnerability Description

In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in iconv implementation may allow an attacker to write past the end of an output buffer. Depending on the implementation, an attacker may be able to create a denial of service, provoke incorrect program behavior, or induce a remote code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-5600

Credits & Attribution

No credits recorded in the NVD database.

References

More from FreeBSD

View All →
CVE-2025-24934
SO_REUSEPORT_LB breaks connect(2) for UDP sockets
Unknown 0
CVE-2025-15576
Jail chroot escape via fd exchange with a different jail
Unknown 0
CVE-2025-15547
Jail escape by a privileged user via nullfs
Unknown 0
CVE-2025-14769
ipfw denial of service
Unknown 0
CVE-2025-14558
Remote code execution via ND6 Router Advertisements
Unknown 0

Affected Vendor

Affected Software

FreeBSD
Vulnerable Versions:
FreeBSD 12.0 before 12.0-RELEASE-p7 and 11.2 before 11.2-RELEASE-p11

Timeline

Official Publish: July 3rd, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.