PT-2019-2462 · Intel+4 · Intel Proset/Wireless Wifi+4

Published 2019-05-24 · Updated 2022-03-08 · CVE-2019-0136

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel PROSet/Wireless WiFi Software versions prior to 21.10

Description The issue is related to insufficient access control and errors in resource release, which may allow an unauthenticated user to potentially enable denial of service via adjacent access. This could be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 21.10, update to version 21.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the Intel PROSet/Wireless WiFi Software to minimize the risk of exploitation.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2019-02240

CESA-2020_3220

CVE-2019-0136

DLA-1919-1

DLA-1919-2

DLA-1930-1

DLA-2114-1

RHSA-2020:3220

RHSA-2020_3220

RHSA-2021:4687

SUSE-SU-2022:0325-1

SUSE-SU-2022:0327-1

SUSE-SU-2022:0328-1

SUSE-SU-2022:0329-1

SUSE-SU-2022:0362-1

SUSE-SU-2022:0477-1

SUSE-SU-2022:14905-1

SUSE-SU-2022_14905-1

USN-4115-1

USN-4115-2

USN-4118-1

USN-4145-1

USN-4147-1

Affected Products

Centos

Intel Proset/Wireless Wifi

Red Hat

Suse

Ubuntu

References · 209

• https://ubuntu.com/security/notices/USN-4115-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-13648 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15926 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0327-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-13631 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2114-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-0136 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0362-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15214 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-0136 · Security Note
• https://ubuntu.com/security/CVE-2019-9506 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-20784 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-12819 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4147-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15292 · Vendor Advisory