What is CVE-2019-3805?

CVE-2019-3805 is a medium-severity vulnerability in Red Hat Wildfly, classified under Signal Handler Race Condition. CVSS score: 5.5/10. Published 2019-05-03.

How severe is CVE-2019-3805?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Red Hat Wildfly

CVE-2019-3805

A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system. An attacker could exploit this by modifying the PID file in /va…

EPSS: 0.001 (22.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Red Hat Wildfly — versions affects up to 16.0.0.Final

Weakness classification (CWE)

CWE-364 — Signal Handler Race Condition

References

bugzilla.redhat.com/show_bug.cgi (x_refsource_CONFIRM)
RHSA-2019:1107 (vendor-advisory, x_refsource_REDHAT)
RHSA-2019:1108 (vendor-advisory, x_refsource_REDHAT)
RHSA-2019:1106 (vendor-advisory, x_refsource_REDHAT)
RHSA-2019:1140 (vendor-advisory, x_refsource_REDHAT)
security.netapp.com/advisory/ntap-20190517-0004/ (x_refsource_CONFIRM)
RHSA-2019:2413 (vendor-advisory, x_refsource_REDHAT)
RHSA-2020:0727 (vendor-advisory, x_refsource_REDHAT)

Frequently asked questions

What is CVE-2019-3805?: CVE-2019-3805 is a medium-severity vulnerability in Red Hat Wildfly, classified under Signal Handler Race Condition. CVSS score: 5.5/10. Published 2019-05-03.
How severe is CVE-2019-3805?: Medium severity. CVSS v3 base score is 5.5 out of 10.