PT-2019-15860 · Idrix · Veracrypt

Publicado 2019-12-13 · Atualizado 2020-08-24 · CVE-2019-19501

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VeraCrypt version 1.24

Description The issue allows for local privilege escalation during the execution of VeraCryptExpander.exe.

Recommendations For VeraCrypt version 1.24, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2019-19501

Produtos afetados

Veracrypt

Referências · 4

• https://veracrypt.fr/en/Release%20Notes.html · Aviso do Fabricante
• https://veracrypt.fr/code/VeraCrypt/commit/?id=07bb27e3b94ee26128d5c7f800cdcf3232ff281a · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-19501 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-19501 · Nota de Segurança