CVE-2019-18567

Опубликовано: 03 фев. 2020

Источник: nvd

CVSS3: 6.1

CVSS3: 6.3

CVSS2: 3.3

EPSS Низкий

Описание

Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.

Ссылки

https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567
Exploit
Third Party Advisory
https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released
Release Notes
Vendor Advisory
https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567
Exploit
Third Party Advisory
https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hp:bromium:*:*:*:*:*:*:*:*

Версия от 4.0.3.2060 (включая) до 4.1.7 (включая)

EPSS

Процентиль: 54%

0.0031

Низкий

6.1 Medium

CVSS3

6.3 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-362

CWE-125

Связанные уязвимости

GHSA-3vx6-g786-2jpv

github

больше 3 лет назад

Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service. Versions prior to

EPSS

Процентиль: 54%

0.0031

Низкий

6.1 Medium

CVSS3

6.3 Medium

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-362

CWE-125