PT-2019-18994 · Microsoft · Lha.Sys

Jackson T · Publicado 2019-02-18 · Atualizado 2023-04-16 · CVE-2019-8372

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LHA.sys driver versions prior to 1.1.1811.2101

Description The issue allows low-privileged users to read and write arbitrary physical memory, potentially elevating system privileges. This is possible due to the device object having an associated symbolic link and an open DACL, which can be exploited via specially crafted IOCTL requests.

Recommendations For versions prior to 1.1.1811.2101, update the LHA.sys driver to version 1.1.1811.2101 or later to resolve the issue. As a temporary workaround, consider restricting access to the LHA.sys driver to minimize the risk of exploitation.

Exploit

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2019-8372

Produtos afetados

Lha.Sys

Referências · 6

• 🔥 http://jackson-t.ca/lg-driver-lpe.html · Exploit
• https://lgsecurity.lge.com/security_updates.html · Aviso do Fabricante
• https://twitter.com/Jackson_T/status/1097353402034475009 · Nota
• https://t.me/ckure/12330 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-8372 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-8372 · Aviso do Fabricante