PT-2020-9963 · Bromium · Bromium Client

Nicolas Delhaye · Published 2020-02-03 · Updated 2021-11-03 · CVE-2019-18567

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Bromium client versions 4.0.3.2060 through 4.1.7 Update 1

Description: The issue is caused by an out of bound read, resulting in a race condition that can lead to Kernel memory leaks or denial of service.

Recommendations: For Bromium client versions 4.0.3.2060 through 4.1.7 Update 1, update to a version later than 4.1.7 Update 1 to resolve the issue.

Exploit

Fix

Out of bounds Read

Race Condition

Weakness Enumeration

CWE-125

CWE-362

Related Identifiers

CVE-2019-18567

Affected Products

Bromium Client

References · 5

• 🔥 https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567 · Exploit
• https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-18567 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18567 · Vendor Advisory
• https://t.me/cvenotify/734 · Telegram Post