PT-2019-17450 · Mesa+3 · X11 Mesa 3D Graphics Library+3

Tim Brown · Publicado 2019-07-31 · Atualizado 2022-06-21 · CVE-2019-5068

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions X11 Mesa 3D Graphics Library version 19.1.2

Description A shared memory permissions issue exists, allowing an attacker to access shared memory without specific permissions, potentially triggering the vulnerability.

Recommendations For X11 Mesa 3D Graphics Library version 19.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Enumeração de Fraquezas

CWE-277

CWE-732

Identificadores relacionados

ALT-PU-2019-2332

CVE-2019-5068

DLA-1993-1

OPENSUSE-SU-2020:0084-1

OPENSUSE-SU-2020_0084-1

OPENSUSE-SU-2024:10599-1

SUSE-SU-2020:0111-1

SUSE-SU-2020:0111-2

SUSE-SU-2020:0132-1

SUSE-SU-2020:0145-1

SUSE-SU-2020:0146-1

SUSE-SU-2020_0111-1

SUSE-SU-2020_0111-2

SUSE-SU-2020_0132-1

SUSE-SU-2020_0145-1

SUSE-SU-2020_0146-1

SUSE-SU-2021:3117-1

SUSE-SU-2021_3117-1

USN-4271-1

Produtos afetados

Alt Linux

Suse

Ubuntu

X11 Mesa 3D Graphics Library

Referências · 47

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857 · Exploit
• https://suse.com/support/update/announcement/2020/suse-su-20200146-1 · Nota
• https://osv.dev/vulnerability/DLA-1993-1 · Aviso do Fabricante
• https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc · Correção
• https://bugzilla.suse.com/1156015 · Nota
• https://ubuntu.com/security/CVE-2019-5068 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4271-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2019-5068 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2019-2332 · Aviso do Fabricante
• https://lists.suse.com/pipermail/sle-security-updates/2021-September/009451.html · Nota
• https://cve.org/CVERecord?id=CVE-2019-5068 · Nota de Segurança
• https://security-tracker.debian.org/tracker/DLA-1993-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-5068.html · Nota
• https://lists.suse.com/pipermail/sle-security-updates/2020-January/006356.html · Nota
• https://osv.dev/vulnerability/SUSE-SU-2020:0132-1 · Aviso do Fabricante