CVE-2019-5614

CVE-2019-5614 is a critical vulnerability affecting FreeBSD versions 11.3 and 12.1, as well as NetApp products utilizing these FreeBSD versions. It stems from incomplete packet data validation, allowing an attacker to trigger out-of-bounds memory access, leading to a kernel panic or other unpredictable system behavior. With a CVSS score of 9.8, this vulnerability is highly severe, as it can be exploited remotely over the network without user interaction and results in complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.