CVE-2019-3819: falha de média gravidade em The Linux Foundation kernel:
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.2epss 0.5%
A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user ("root") can cause a system lock up and a denial of service. Versions from v4.18 and newer are vulnerable.
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Produtos afetados
The Linux Foundation · kernel:CVEs relacionadas — The Linux Foundation kernel:
No mesmo produto, das mais perigosas para as menos.
Referências
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3819https://lists.debian.org/debian-lts-announce/2019/03/msg00034.htmlhttps://lists.debian.org/debian-lts-announce/2019/04/msg00004.htmlhttps://lists.debian.org/debian-lts-announce/2019/05/msg00002.htmlhttps://usn.ubuntu.com/3932-1/https://usn.ubuntu.com/3932-2/https://usn.ubuntu.com/4115-1/https://usn.ubuntu.com/4118-1/http://www.securityfocus.com/bid/106730