PT-2019-17450 · Mesa+3 · X11 Mesa 3D Graphics Library+3

Tim Brown · Published 2019-07-31 · Updated 2022-06-21 · CVE-2019-5068

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions X11 Mesa 3D Graphics Library version 19.1.2

Description A shared memory permissions issue exists, allowing an attacker to access shared memory without specific permissions, potentially triggering the vulnerability.

Recommendations For X11 Mesa 3D Graphics Library version 19.1.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-277

CWE-732

Related Identifiers

ALT-PU-2019-2332

CVE-2019-5068

DLA-1993-1

OPENSUSE-SU-2020:0084-1

OPENSUSE-SU-2020_0084-1

OPENSUSE-SU-2024:10599-1

SUSE-SU-2020:0111-1

SUSE-SU-2020:0111-2

SUSE-SU-2020:0132-1

SUSE-SU-2020:0145-1

SUSE-SU-2020:0146-1

SUSE-SU-2020_0111-1

SUSE-SU-2020_0111-2

SUSE-SU-2020_0132-1

SUSE-SU-2020_0145-1

SUSE-SU-2020_0146-1

SUSE-SU-2021:3117-1

SUSE-SU-2021_3117-1

USN-4271-1

Affected Products

Alt Linux

Suse

Ubuntu

X11 Mesa 3D Graphics Library

References · 47

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857 · Exploit
• https://osv.dev/vulnerability/DLA-1993-1 · Vendor Advisory
• https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc · Patch
• https://ubuntu.com/security/CVE-2019-5068 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4271-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-5068 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2019-2332 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-5068 · Security Note
• https://security-tracker.debian.org/tracker/DLA-1993-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0132-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4271-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5068 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0145-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5068 · Security Note
• https://usn.ubuntu.com/4271-1 · Vendor Advisory