PT-2019-3106 · Linux+2 · Linux Kernel+2

Syzbot

·

Publicado

2019-06-10

·

Atualizado

2023-11-09

·

CVE-2019-15219

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.1.8
Description The issue is related to a NULL pointer dereference in the drivers/usb/misc/sisusbvga/sisusb.c driver, caused by a malicious USB device. This can lead to a denial of service.
Recommendations For Linux kernel versions prior to 5.1.8, update to version 5.1.8 or later to resolve the issue. As a temporary workaround, consider disabling the use of USB devices from untrusted sources to minimize the risk of exploitation. Restrict access to the sisusb.c driver to minimize the risk of denial of service.

Exploit

Correção

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2019-2024
ALT-PU-2019-2036
ALT-PU-2019-2120
ALT-PU-2019-2311
ALT-PU-2020-1198
ALT-PU-2020-1501
ALT-PU-2020-2410
ALT-PU-2020-2433
ALT-PU-2021-1870
BDU:2019-03089
CVE-2019-15219
DLA-1919-1
DLA-1919-2
DLA-1930-1
OPENSUSE-SU-2019:2173-1
OPENSUSE-SU-2019:2181-1
OPENSUSE-SU-2019_2173-1
OPENSUSE-SU-2019_2181-1
SUSE-SU-2019:14218-1
SUSE-SU-2019:2412-1
SUSE-SU-2019:2414-1
SUSE-SU-2019:2424-1
SUSE-SU-2019:2648-1
SUSE-SU-2019:2651-1
SUSE-SU-2019:2658-1
SUSE-SU-2019:2738-1
SUSE-SU-2019:2756-1
SUSE-SU-2019:2949-1
SUSE-SU-2019:2950-1
SUSE-SU-2019:2984-1
SUSE-SU-2019_14218-1

Produtos afetados

Alt Linux
Linux Kernel
Suse