CVE-2019-3805 MEDIUM

CVE-2019-3805

Vendor Red Hat

Product wildfly

Weakness CWE-364

Published May 3, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

5.5/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.

Key dates

02Disclosure timeline

May 3, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-3805 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/364.html

Related vulnerabilities

04Related CVE

CVE-2026-27766 multimedia_audio_framework has a Race Condition vulnerability CVE-2024-6387 Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6409 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9 CVE-2025-4598 Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump CVE-2023-5676 Eclipse OpenJ9 possible infinite busy hang