CVE-2019-19530

Опубликовано: 03 дек. 2019

Источник: nvd

CVSS3: 4.6

CVSS2: 4.9

EPSS Низкий

Описание

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/12/03/4
Mailing List
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10
Issue Tracking
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c52873e5a1ef72f845526d9f6a50704433f9c625
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/12/03/4
Mailing List
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10
Issue Tracking
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c52873e5a1ef72f845526d9f6a50704433f9c625
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.2.10 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.00042

Низкий

4.6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2019-19530

CVSS3: 4.6

ubuntu

больше 5 лет назад

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.

CVE-2019-19530

CVSS3: 5.7

redhat

почти 6 лет назад

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.

CVE-2019-19530

CVSS3: 4.6

debian

больше 5 лет назад

In the Linux kernel before 5.2.10, there is a use-after-free bug that ...

GHSA-php2-hmpj-qvcw

CVSS3: 4.6

github

около 3 лет назад

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.

ELSA-2020-5956

oracle-oval

больше 4 лет назад

ELSA-2020-5956: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS

Процентиль: 12%

0.00042

Низкий

4.6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-416