PT-2019-4640 · Synaptics · Synaptics Touchpad

Publicado 2019-03-17 · Atualizado 2019-03-27 · CVE-2018-15532

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Synaptics Touchpad drivers versions prior to 2018-06-06

Description The issue is related to errors in processing API requests in the SynTP.sys driver for Synaptics Touchpad. It allows local users to obtain sensitive information about freed kernel addresses, potentially enabling unauthorized access to protected information.

Recommendations For versions prior to 2018-06-06, update the Synaptics Touchpad drivers to a version released after 2018-06-06 to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2020-00802

CVE-2018-15532

Produtos afetados

Synaptics Touchpad

Referências · 9

• https://synaptics.com/products/touchpad-family · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-15532 · Nota de Segurança
• https://bdu.fstec.ru/vul/2020-00802 · Nota de Segurança
• https://securityfocus.com/bid/106799 · Nota
• http://securityfocus.com/bid/106799 · Nota
• https://synaptics.com/sites/default/files/touchpad-driver-security-brief-20190124.pdf · Aviso do Fabricante
• https://support.lenovo.com/us/en/product_security/LEN-23156 · Nota
• https://support.hp.com/us-en/document/c06220540 · Nota
• https://osv.dev/vulnerability/CVE-2018-15532 · Aviso do Fabricante