CVE-2005-2019: Freebsd

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain resources while performing table lookups, which can cause the cache results to be corrupted during multiple concurrent lookups, allowing remote attackers to bypass intended access restrictions.

Affected products

• Freebsd Freebsd: version 5.4 only

Published 2005-07-05. Last modified 2026-06-16.