PT-2019-2824 · Linux+3 · Linux Kernel+3

Vladis Dronov · Published 2019-01-24 · Updated 2020-10-19 · CVE-2019-3819

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions v4.18 and newer

Description A flaw was found in the Linux kernel in the function hid debug events read() in the drivers/hid/hid-debug.c file, which may enter an infinite loop with certain parameters passed from a userspace. This could allow a local privileged user (with "root" privileges) to cause a system lock up and a denial of service. The issue is related to uncontrolled resource consumption.

Recommendations For Linux kernel versions v4.18 and newer, consider disabling the hid debug events read() function as a temporary workaround to minimize the risk of exploitation until a patch is available. Restrict access to the drivers/hid/hid-debug.c file to prevent potential abuse.

Exploit

Fix

DoS

Resource Exhaustion

Infinite Loop

Weakness Enumeration

CWE-400

CWE-835

Related Identifiers

ALT-PU-2019-1251

ALT-PU-2019-1252

ALT-PU-2019-1285

ALT-PU-2019-1286

ALT-PU-2019-2213

ALT-PU-2019-2234

AZL-34853

AZL-6520

BDU:2019-02782

CVE-2019-3819

DLA-1731-1

DLA-1731-2

DLA-1771-1

MGASA-2019-0097

MGASA-2019-0098

MGASA-2019-0171

OPENSUSE-SU-2019:1193-1

OPENSUSE-SU-2019_1193-1

SUSE-SU-2019:0765-1

SUSE-SU-2019:0767-1

SUSE-SU-2019:0784-1

SUSE-SU-2019:0785-1

SUSE-SU-2019:2263-1

SUSE-SU-2019:2299-1

USN-3932-1

USN-3932-2

USN-4115-1

USN-4115-2

USN-4118-1

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

References · 516

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ptrace_traceme_pkexec_helper.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-13272 · Exploit
• 🔥 https://github.com/butterflyhack/CVE-2019-10207 · Exploit
• 🔥 https://github.com/mmxsrup/CVE-2018-3639 · Exploit
• 🔥 https://github.com/oneoy/CVE-2019-13272 · Exploit
• 🔥 https://github.com/butterflyhack/CVE-2019-8956 · Exploit
• 🔥 https://github.com/sasqwatch/cve-2019-11477-poc · Exploit
• 🔥 https://github.com/Cyc1eC/CVE-2019-13272 · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• 🔥❌ https://github.com/Huandtx/CVE-2019-13272 · Exploit, Deleted
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-10639 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16884 · Vendor Advisory