CVE-2019-5599

In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attacker to cause several linked lists to grow unbounded and cause an expensive list traversal on every packet being processed, leading to resource exhaustion and a denial of service.

• CWE-770

• http://packetstormsecurity.com/files/153329/Linux-FreeBSD-TCP-Based-Denial-Of-Service.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/153378/FreeBSD-Security-Advisory-FreeBSD-SA-19-08.rack.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2019/06/17/5Mailing List, Third Party Advisory
• https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.mdMitigation, Third Party Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193Third Party Advisory
• https://seclists.org/bugtraq/2019/Jun/27Mailing List, Mitigation, Patch, Third Party Advisory
• https://security.FreeBSD.org/advisories/FreeBSD-SA-19:08.rack.ascMitigation, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20190625-0004/Third Party Advisory
• https://support.f5.com/csp/article/K75521003Third Party Advisory
• https://www.kb.cert.org/vuls/id/905115Third Party Advisory, US Government Resource
• http://packetstormsecurity.com/files/153329/Linux-FreeBSD-TCP-Based-Denial-Of-Service.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/153378/FreeBSD-Security-Advisory-FreeBSD-SA-19-08.rack.htmlThird Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2019/06/17/5Mailing List, Third Party Advisory
• https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.mdMitigation, Third Party Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193Third Party Advisory
• https://seclists.org/bugtraq/2019/Jun/27Mailing List, Mitigation, Patch, Third Party Advisory
• https://security.FreeBSD.org/advisories/FreeBSD-SA-19:08.rack.ascMitigation, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20190625-0004/Third Party Advisory
• https://support.f5.com/csp/article/K75521003Third Party Advisory
• https://www.kb.cert.org/vuls/id/905115Third Party Advisory, US Government Resource

Published

Jul 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5593Improper permission or value checking in the CLI console may…5.5
• CVE-2019-5594An Improper Neutralization of Input During Web Page Generati…
• CVE-2019-5595In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.…
• CVE-2019-5596In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.…
• CVE-2019-5597In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 1…
• CVE-2019-5598In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE befor…
• CVE-2019-5600In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 1…
• CVE-2019-5601In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 1…
• CVE-2019-5602In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 1…
• CVE-2019-5603In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 1…7.8
• CVE-2019-5604In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 1…9.6
• CVE-2019-5605In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 1…6.5