PT-2019-2462 · Intel+4 · Intel Proset/Wireless Wifi+4

Publicado 2019-05-24 · Atualizado 2022-03-08 · CVE-2019-0136

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel PROSet/Wireless WiFi Software versions prior to 21.10

Description The issue is related to insufficient access control and errors in resource release, which may allow an unauthenticated user to potentially enable denial of service via adjacent access. This could be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 21.10, update to version 21.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the Intel PROSet/Wireless WiFi Software to minimize the risk of exploitation.

Correção

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

BDU:2019-02240

CESA-2020_3220

CVE-2019-0136

DLA-1919-1

DLA-1919-2

DLA-1930-1

DLA-2114-1

RHSA-2020:3220

RHSA-2020_3220

RHSA-2021:4687

SUSE-SU-2022:0325-1

SUSE-SU-2022:0327-1

SUSE-SU-2022:0328-1

SUSE-SU-2022:0329-1

SUSE-SU-2022:0362-1

SUSE-SU-2022:0477-1

SUSE-SU-2022:14905-1

SUSE-SU-2022_14905-1

USN-4115-1

USN-4115-2

USN-4118-1

USN-4145-1

USN-4147-1

Produtos afetados

Centos

Intel Proset/Wireless Wifi

Red Hat

Suse

Ubuntu

Referências · 209

• https://bugzilla.suse.com/1194516 · Nota
• https://ubuntu.com/security/notices/USN-4115-2 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-13648 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-15926 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-25672 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2022:0327-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-13631 · Aviso do Fabricante
• https://osv.dev/vulnerability/DLA-2114-1 · Aviso do Fabricante
• http://securityfocus.com/bid/108777 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-0136 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-0935 · Nota
• https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html · Nota
• https://suse.com/security/cve/CVE-2021-23134 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2022:0362-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-15214 · Aviso do Fabricante