Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2019-18786 (GCVE-0-2019-18786)
Vulnerability from cvelistv5 – Published: 2019-11-06 02:29 – Updated: 2024-08-05 02:02- n/a
| URL | Tags | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T02:02:38.240Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://patchwork.linuxtv.org/patch/59542/"
},
{
"name": "USN-4285-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4285-1/"
},
{
"name": "USN-4287-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4287-1/"
},
{
"name": "USN-4287-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4287-2/"
},
{
"name": "USN-4284-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4284-1/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel through 5.3.8, f-\u003efmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-03-02T20:06:13.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://patchwork.linuxtv.org/patch/59542/"
},
{
"name": "USN-4285-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4285-1/"
},
{
"name": "USN-4287-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4287-1/"
},
{
"name": "USN-4287-2",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4287-2/"
},
{
"name": "USN-4284-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4284-1/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-18786",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In the Linux kernel through 5.3.8, f-\u003efmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://patchwork.linuxtv.org/patch/59542/",
"refsource": "MISC",
"url": "https://patchwork.linuxtv.org/patch/59542/"
},
{
"name": "USN-4285-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4285-1/"
},
{
"name": "USN-4287-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4287-1/"
},
{
"name": "USN-4287-2",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4287-2/"
},
{
"name": "USN-4284-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4284-1/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2019-18786",
"datePublished": "2019-11-06T02:29:34.000Z",
"dateReserved": "2019-11-06T00:00:00.000Z",
"dateUpdated": "2024-08-05T02:02:38.240Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
GHSA-642M-R6QQ-XQRV
Vulnerability from github – Published: 2022-05-24 17:00 – Updated: 2022-05-24 17:00In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem.
{
"affected": [],
"aliases": [
"CVE-2019-18786"
],
"database_specific": {
"cwe_ids": [
"CWE-200",
"CWE-908"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2019-11-06T03:15:00Z",
"severity": "LOW"
},
"details": "In the Linux kernel through 5.3.8, f-\u003efmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem.",
"id": "GHSA-642m-r6qq-xqrv",
"modified": "2022-05-24T17:00:23Z",
"published": "2022-05-24T17:00:23Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18786"
},
{
"type": "WEB",
"url": "https://patchwork.linuxtv.org/patch/59542"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4284-1"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4285-1"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4287-1"
},
{
"type": "WEB",
"url": "https://usn.ubuntu.com/4287-2"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
CVE-2019-18786
Vulnerability from fstec - Published: 05.11.2019{
"CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
"CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "8.1 \u00ab\u041b\u0435\u043d\u0438\u043d\u0433\u0440\u0430\u0434\u00bb (Astra Linux Special Edition \u0434\u043b\u044f \u00ab\u042d\u043b\u044c\u0431\u0440\u0443\u0441\u00bb), \u043e\u0442 4.15 \u0434\u043e 4.19.191 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.20 \u0434\u043e 5.4.121 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u0434\u043e 16.01.2023 (\u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb), \u043e\u0442 4.13 \u0434\u043e 4.14.233 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.234\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.192\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.122\n\n\u0414\u043b\u044f \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f linux \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.4.123-1~bpo10+1.osnova162.strelets\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "05.11.2019",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "29.01.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "15.01.2020",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2020-00122",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2019-18786",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Astra Linux Special Edition \u0434\u043b\u044f \u00ab\u042d\u043b\u044c\u0431\u0440\u0443\u0441\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211611156), Linux, \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition \u0434\u043b\u044f \u00ab\u042d\u043b\u044c\u0431\u0440\u0443\u0441\u00bb 8.1 \u00ab\u041b\u0435\u043d\u0438\u043d\u0433\u0440\u0430\u0434\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211611156), \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.14 \u0434\u043e 4.14.234 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.19 \u0434\u043e 4.19.192 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.4 \u0434\u043e 5.4.122 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.10 \u0434\u043e 5.10.40 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.12 \u0434\u043e 5.12.7 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.14 \u0434\u043e 4.14.161 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.4 \u0434\u043e 5.4.7 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.19 \u0434\u043e 4.19.92 , \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb \u0434\u043e 16.01.2023 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rcar_drif_g_fmt_sdr_cap (drivers/media/platform/rcar_drif.c) \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CWE-200), \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 (CWE-908)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rcar_drif_g_fmt_sdr_cap (drivers/media/platform/rcar_drif.c) \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18786\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.234\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.192\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.122\nhttps://lore.kernel.org/lkml/20191018044701.4786-1-kjlu@umn.edu/\nhttps://nvd.nist.gov/vuln/detail/CVE-2019-18786\nhttps://patchwork.linuxtv.org/patch/59542/\nhttps://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023\nhttps://ubuntu.com/security/notices/USN-4284-1\nhttps://ubuntu.com/security/notices/USN-4285-1\nhttps://ubuntu.com/security/notices/USN-4287-1\nhttps://ubuntu.com/security/notices/USN-4287-2\nhttps://usn.ubuntu.com/4284-1/\nhttps://usn.ubuntu.com/4285-1/\nhttps://usn.ubuntu.com/4287-1/\nhttps://usn.ubuntu.com/4287-2/\nhttps://usn.ubuntu.com/usn/usn-4284-1\nhttps://usn.ubuntu.com/usn/usn-4285-1\nhttps://usn.ubuntu.com/usn/usn-4287-1\nhttps://usn.ubuntu.com/usn/usn-4287-2\nhttps://www.cve.org/CVERecord?id=CVE-2019-18786\nhttps://wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-200, CWE-908",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}
CERTFR-2020-AVI-096
Vulnerability from certfr_avis - Published: 2020-02-19 - Updated: 2020-02-19
De multiples vulnérabilités ont été découvertes dans le noyau linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Ubuntu 16.04 LTS",
"product": {
"name": "Ubuntu",
"vendor": {
"name": "Ubuntu",
"scada": false
}
}
},
{
"description": "Ubuntu 19.10",
"product": {
"name": "Ubuntu",
"vendor": {
"name": "Ubuntu",
"scada": false
}
}
},
{
"description": "Ubuntu 18.04 LTS",
"product": {
"name": "Ubuntu",
"vendor": {
"name": "Ubuntu",
"scada": false
}
}
},
{
"description": "Ubuntu 14.04 ESM",
"product": {
"name": "Ubuntu",
"vendor": {
"name": "Ubuntu",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-19082",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19082"
},
{
"name": "CVE-2019-18811",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18811"
},
{
"name": "CVE-2019-15221",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15221"
},
{
"name": "CVE-2019-18809",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18809"
},
{
"name": "CVE-2019-19227",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19227"
},
{
"name": "CVE-2019-15099",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15099"
},
{
"name": "CVE-2019-19252",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19252"
},
{
"name": "CVE-2019-5108",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5108"
},
{
"name": "CVE-2019-15217",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15217"
},
{
"name": "CVE-2019-19332",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19332"
},
{
"name": "CVE-2019-15291",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15291"
},
{
"name": "CVE-2019-19071",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19071"
},
{
"name": "CVE-2019-19062",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19062"
},
{
"name": "CVE-2019-18683",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18683"
},
{
"name": "CVE-2019-19063",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19063"
},
{
"name": "CVE-2019-19767",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19767"
},
{
"name": "CVE-2019-19078",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19078"
},
{
"name": "CVE-2019-19050",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19050"
},
{
"name": "CVE-2019-19602",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19602"
},
{
"name": "CVE-2019-19947",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19947"
},
{
"name": "CVE-2019-16229",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16229"
},
{
"name": "CVE-2019-16232",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16232"
},
{
"name": "CVE-2019-18885",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18885"
},
{
"name": "CVE-2019-19077",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19077"
},
{
"name": "CVE-2019-15220",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-15220"
},
{
"name": "CVE-2019-19057",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19057"
},
{
"name": "CVE-2019-19056",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19056"
},
{
"name": "CVE-2019-17351",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17351"
},
{
"name": "CVE-2019-19051",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19051"
},
{
"name": "CVE-2019-14615",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14615"
},
{
"name": "CVE-2019-19068",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19068"
},
{
"name": "CVE-2019-19066",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19066"
},
{
"name": "CVE-2020-7053",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7053"
},
{
"name": "CVE-2019-19241",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19241"
},
{
"name": "CVE-2019-18786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18786"
},
{
"name": "CVE-2019-20096",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20096"
},
{
"name": "CVE-2019-19965",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19965"
}
],
"initial_release_date": "2020-02-19T00:00:00",
"last_revision_date": "2020-02-19T00:00:00",
"links": [],
"reference": "CERTFR-2020-AVI-096",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-02-19T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau linux\nd\u0027Ubuntu. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire, un d\u00e9ni de service \u00e0 distance et une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau linux d\u0027Ubuntu",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 d\u0027Ubuntu USN-4287-1 du 18 f\u00e9vrier 2020",
"url": "https://usn.ubuntu.com/4287-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 d\u0027Ubuntu USN-4286-2 du 18 f\u00e9vrier 2020",
"url": "https://usn.ubuntu.com/4286-2/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 d\u0027Ubuntu USN-4286-1 du 18 f\u00e9vrier 2020",
"url": "https://usn.ubuntu.com/4286-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 d\u0027Ubuntu USN-4285-1 du 18 f\u00e9vrier 2020",
"url": "https://usn.ubuntu.com/4285-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 d\u0027Ubuntu USN-4284-1 du 18 f\u00e9vrier 2020",
"url": "https://usn.ubuntu.com/4284-1/"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 d\u0027Ubuntu USN-4287-2 du 18 f\u00e9vrier 2020",
"url": "https://usn.ubuntu.com/4287-2/"
}
]
}
CERTFR-2020-AVI-331
Vulnerability from certfr_avis - Published: 2020-06-02 - Updated: 2020-06-02
De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Android toutes versions sans le correctif de s\u00e9curit\u00e9 du 01 juin 2020",
"product": {
"name": "Android",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2020-0197",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0197"
},
{
"name": "CVE-2020-0176",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0176"
},
{
"name": "CVE-2019-13135",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13135"
},
{
"name": "CVE-2020-0165",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0165"
},
{
"name": "CVE-2020-0120",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0120"
},
{
"name": "CVE-2019-19529",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19529"
},
{
"name": "CVE-2020-0137",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0137"
},
{
"name": "CVE-2020-0206",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0206"
},
{
"name": "CVE-2020-0216",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0216"
},
{
"name": "CVE-2020-0204",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0204"
},
{
"name": "CVE-2020-0177",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0177"
},
{
"name": "CVE-2020-0194",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0194"
},
{
"name": "CVE-2020-0095",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0095"
},
{
"name": "CVE-2020-3660",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3660"
},
{
"name": "CVE-2020-0212",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0212"
},
{
"name": "CVE-2020-3658",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3658"
},
{
"name": "CVE-2020-0153",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0153"
},
{
"name": "CVE-2020-0211",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0211"
},
{
"name": "CVE-2020-0234",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0234"
},
{
"name": "CVE-2020-3661",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3661"
},
{
"name": "CVE-2020-0199",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0199"
},
{
"name": "CVE-2020-0210",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0210"
},
{
"name": "CVE-2020-0161",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0161"
},
{
"name": "CVE-2017-9704",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9704"
},
{
"name": "CVE-2020-0168",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0168"
},
{
"name": "CVE-2019-10501",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10501"
},
{
"name": "CVE-2019-19543",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19543"
},
{
"name": "CVE-2019-10626",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10626"
},
{
"name": "CVE-2020-0144",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0144"
},
{
"name": "CVE-2020-0233",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0233"
},
{
"name": "CVE-2020-0160",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0160"
},
{
"name": "CVE-2019-19526",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19526"
},
{
"name": "CVE-2020-0187",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0187"
},
{
"name": "CVE-2020-0167",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0167"
},
{
"name": "CVE-2020-0118",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0118"
},
{
"name": "CVE-2020-0179",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0179"
},
{
"name": "CVE-2020-3614",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3614"
},
{
"name": "CVE-2020-0145",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0145"
},
{
"name": "CVE-2020-0171",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0171"
},
{
"name": "CVE-2020-3642",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3642"
},
{
"name": "CVE-2020-0151",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0151"
},
{
"name": "CVE-2020-0185",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0185"
},
{
"name": "CVE-2020-0115",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0115"
},
{
"name": "CVE-2020-0147",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0147"
},
{
"name": "CVE-2020-0113",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0113"
},
{
"name": "CVE-2019-19071",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19071"
},
{
"name": "CVE-2020-0141",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0141"
},
{
"name": "CVE-2019-18683",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18683"
},
{
"name": "CVE-2020-0133",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0133"
},
{
"name": "CVE-2020-0140",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0140"
},
{
"name": "CVE-2019-19767",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-19767"
},
{
"name": "CVE-2020-0131",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0131"
},
{
"name": "CVE-2020-3662",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3662"
},
{
"name": "CVE-2020-0139",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0139"
},
{
"name": "CVE-2020-0143",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0143"
},
{
"name": "CVE-2020-0136",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0136"
},
{
"name": "CVE-2020-0169",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0169"
},
{
"name": "CVE-2020-0186",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0186"
},
{
"name": "CVE-2020-0132",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0132"
},
{
"name": "CVE-2020-0149",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0149"
},
{
"name": "CVE-2019-2219",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-2219"
},
{
"name": "CVE-2020-0172",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0172"
},
{
"name": "CVE-2020-0156",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0156"
},
{
"name": "CVE-2020-0158",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0158"
},
{
"name": "CVE-2020-3676",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3676"
},
{
"name": "CVE-2020-0124",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0124"
},
{
"name": "CVE-2020-0203",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0203"
},
{
"name": "CVE-2020-0142",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0142"
},
{
"name": "CVE-2020-8648",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8648"
},
{
"name": "CVE-2020-3635",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3635"
},
{
"name": "CVE-2020-0232",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0232"
},
{
"name": "CVE-2020-0116",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0116"
},
{
"name": "CVE-2020-0215",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0215"
},
{
"name": "CVE-2020-8428",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8428"
},
{
"name": "CVE-2020-0154",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0154"
},
{
"name": "CVE-2020-0134",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0134"
},
{
"name": "CVE-2020-0164",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0164"
},
{
"name": "CVE-2019-14080",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14080"
},
{
"name": "CVE-2019-17666",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-17666"
},
{
"name": "CVE-2020-0155",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0155"
},
{
"name": "CVE-2020-0217",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0217"
},
{
"name": "CVE-2020-0163",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0163"
},
{
"name": "CVE-2020-0170",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0170"
},
{
"name": "CVE-2020-0114",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0114"
},
{
"name": "CVE-2020-0235",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0235"
},
{
"name": "CVE-2020-0191",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0191"
},
{
"name": "CVE-2020-0188",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0188"
},
{
"name": "CVE-2019-14092",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14092"
},
{
"name": "CVE-2020-0127",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0127"
},
{
"name": "CVE-2020-0213",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0213"
},
{
"name": "CVE-2020-0196",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0196"
},
{
"name": "CVE-2020-0193",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0193"
},
{
"name": "CVE-2020-0126",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0126"
},
{
"name": "CVE-2020-0121",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0121"
},
{
"name": "CVE-2019-10597",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10597"
},
{
"name": "CVE-2019-14076",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14076"
},
{
"name": "CVE-2020-0181",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0181"
},
{
"name": "CVE-2020-0135",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0135"
},
{
"name": "CVE-2019-14062",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14062"
},
{
"name": "CVE-2020-0183",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0183"
},
{
"name": "CVE-2020-0117",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0117"
},
{
"name": "CVE-2020-3628",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3628"
},
{
"name": "CVE-2020-0148",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0148"
},
{
"name": "CVE-2020-0166",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0166"
},
{
"name": "CVE-2019-14073",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14073"
},
{
"name": "CVE-2020-0208",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0208"
},
{
"name": "CVE-2020-0162",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0162"
},
{
"name": "CVE-2019-14047",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14047"
},
{
"name": "CVE-2020-0207",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0207"
},
{
"name": "CVE-2019-9460",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-9460"
},
{
"name": "CVE-2020-0200",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0200"
},
{
"name": "CVE-2020-0190",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0190"
},
{
"name": "CVE-2019-14094",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14094"
},
{
"name": "CVE-2020-0173",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0173"
},
{
"name": "CVE-2020-0152",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0152"
},
{
"name": "CVE-2020-0138",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0138"
},
{
"name": "CVE-2020-0195",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0195"
},
{
"name": "CVE-2020-8647",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8647"
},
{
"name": "CVE-2020-0128",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0128"
},
{
"name": "CVE-2020-0219",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0219"
},
{
"name": "CVE-2020-0184",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0184"
},
{
"name": "CVE-2020-0223",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0223"
},
{
"name": "CVE-2020-0180",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0180"
},
{
"name": "CVE-2020-0125",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0125"
},
{
"name": "CVE-2020-0209",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0209"
},
{
"name": "CVE-2020-0198",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0198"
},
{
"name": "CVE-2019-18786",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-18786"
},
{
"name": "CVE-2020-0119",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0119"
},
{
"name": "CVE-2020-0175",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0175"
},
{
"name": "CVE-2020-0129",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0129"
},
{
"name": "CVE-2020-8597",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8597"
},
{
"name": "CVE-2019-16275",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-16275"
},
{
"name": "CVE-2020-3665",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3665"
},
{
"name": "CVE-2020-0182",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0182"
},
{
"name": "CVE-2020-0205",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0205"
},
{
"name": "CVE-2020-3626",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3626"
},
{
"name": "CVE-2020-0192",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0192"
},
{
"name": "CVE-2019-14091",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-14091"
},
{
"name": "CVE-2020-0150",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0150"
},
{
"name": "CVE-2020-0189",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0189"
},
{
"name": "CVE-2020-0178",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0178"
},
{
"name": "CVE-2020-0202",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0202"
},
{
"name": "CVE-2020-0157",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0157"
},
{
"name": "CVE-2020-0146",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0146"
},
{
"name": "CVE-2020-3663",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-3663"
},
{
"name": "CVE-2020-0214",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0214"
},
{
"name": "CVE-2020-0174",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0174"
},
{
"name": "CVE-2020-0159",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0159"
},
{
"name": "CVE-2020-0218",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0218"
},
{
"name": "CVE-2019-13136",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-13136"
},
{
"name": "CVE-2020-0201",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0201"
}
],
"initial_release_date": "2020-06-02T00:00:00",
"last_revision_date": "2020-06-02T00:00:00",
"links": [],
"reference": "CERTFR-2020-AVI-331",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2020-06-02T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Android.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un\nprobl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code\narbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Android",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Android du 01 juin 2020",
"url": "https://source.android.com/security/bulletin/2020-06-01"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Pixel du 01 juin 2020",
"url": "https://source.android.com/security/bulletin/pixel/2020-06-01"
}
]
}
GSD-2019-18786
Vulnerability from gsd - Updated: 2023-12-13 01:23{
"GSD": {
"alias": "CVE-2019-18786",
"description": "In the Linux kernel through 5.3.8, f-\u003efmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem.",
"id": "GSD-2019-18786",
"references": [
"https://www.suse.com/security/cve/CVE-2019-18786.html",
"https://ubuntu.com/security/CVE-2019-18786"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2019-18786"
],
"details": "In the Linux kernel through 5.3.8, f-\u003efmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem.",
"id": "GSD-2019-18786",
"modified": "2023-12-13T01:23:50.312992Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-18786",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In the Linux kernel through 5.3.8, f-\u003efmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://patchwork.linuxtv.org/patch/59542/",
"refsource": "MISC",
"url": "https://patchwork.linuxtv.org/patch/59542/"
},
{
"name": "USN-4285-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4285-1/"
},
{
"name": "USN-4287-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4287-1/"
},
{
"name": "USN-4287-2",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4287-2/"
},
{
"name": "USN-4284-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4284-1/"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "5.3.8",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-18786"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "In the Linux kernel through 5.3.8, f-\u003efmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-908"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://patchwork.linuxtv.org/patch/59542/",
"refsource": "MISC",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "https://patchwork.linuxtv.org/patch/59542/"
},
{
"name": "USN-4285-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4285-1/"
},
{
"name": "USN-4287-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4287-1/"
},
{
"name": "USN-4287-2",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4287-2/"
},
{
"name": "USN-4284-1",
"refsource": "UBUNTU",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4284-1/"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-04-18T15:46Z",
"publishedDate": "2019-11-06T03:15Z"
}
}
}
FKIE_CVE-2019-18786
Vulnerability from fkie_nvd - Published: 2019-11-06 03:15 - Updated: 2024-11-21 04:33| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | https://patchwork.linuxtv.org/patch/59542/ | Issue Tracking, Patch, Third Party Advisory | |
| cve@mitre.org | https://usn.ubuntu.com/4284-1/ | Third Party Advisory | |
| cve@mitre.org | https://usn.ubuntu.com/4285-1/ | Third Party Advisory | |
| cve@mitre.org | https://usn.ubuntu.com/4287-1/ | Third Party Advisory | |
| cve@mitre.org | https://usn.ubuntu.com/4287-2/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://patchwork.linuxtv.org/patch/59542/ | Issue Tracking, Patch, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/4284-1/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/4285-1/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/4287-1/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://usn.ubuntu.com/4287-2/ | Third Party Advisory |
| Vendor | Product | Version | |
|---|---|---|---|
| linux | linux_kernel | * | |
| canonical | ubuntu_linux | 14.04 | |
| canonical | ubuntu_linux | 16.04 | |
| canonical | ubuntu_linux | 18.04 | |
| canonical | ubuntu_linux | 19.10 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"matchCriteriaId": "92BD7B3D-EB49-4A73-8E3D-321AE7F6C9AD",
"versionEndIncluding": "5.3.8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "815D70A8-47D3-459C-A32C-9FEACA0659D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*",
"matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
"matchCriteriaId": "A31C8344-3E02-4EB8-8BD8-4C84B7959624",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel through 5.3.8, f-\u003efmt.sdr.reserved is uninitialized in rcar_drif_g_fmt_sdr_cap in drivers/media/platform/rcar_drif.c, which could cause a memory disclosure problem."
},
{
"lang": "es",
"value": "En el kernel de Linux versiones hasta 5.3.8, f-\u0026gt;fmt.sdr.reserved no se inicializa en la funci\u00f3n rcar_drif_g_fmt_sdr_cap en el archivo drivers/media/platform/rcar_drif.c, lo que podr\u00eda causar un problema de divulgaci\u00f3n de memoria."
}
],
"id": "CVE-2019-18786",
"lastModified": "2024-11-21T04:33:33.937",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-11-06T03:15:10.877",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "https://patchwork.linuxtv.org/patch/59542/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4284-1/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4285-1/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4287-1/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4287-2/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "https://patchwork.linuxtv.org/patch/59542/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4284-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4285-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4287-1/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://usn.ubuntu.com/4287-2/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-908"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
CNVD-2019-39688
Vulnerability from cnvd - Published: 2019-11-08厂商已发布了漏洞修复程序,请及时关注更新: https://patchwork.linuxtv.org/patch/59542/
| Name | Linux Linux kernel <=5.3.8 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2019-18786",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-18786"
}
},
"description": "Linux kernel\u662f\u4e00\u79cd\u8ba1\u7b97\u673a\u64cd\u4f5c\u7cfb\u7edf\u5185\u6838\uff0c\u4ee5C\u8bed\u8a00\u548c\u6c47\u7f16\u8bed\u8a00\u5199\u6210\uff0c\u7b26\u5408POSIX\u6807\u51c6\uff0c\u6309GNU\u901a\u7528\u516c\u5171\u8bb8\u53ef\u8bc1\u53d1\u884c\u3002\n\nLinux kernel 5.3.8\u53ca\u66f4\u65e9\u7248\u672c\u5b58\u5728\u5185\u5b58\u6cc4\u6f0f\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8ef-\u003efmt.sdr.reserved\u5728drivers/media/platform/rcar_drif.c\u4e2d\u7684rcar_drif_g_fmt_sdr_cap\u672a\u521d\u59cb\u5316\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u5185\u5b58\u6cc4\u6f0f\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://patchwork.linuxtv.org/patch/59542/",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2019-39688",
"openTime": "2019-11-08",
"patchDescription": "Linux kernel\u662f\u4e00\u79cd\u8ba1\u7b97\u673a\u64cd\u4f5c\u7cfb\u7edf\u5185\u6838\uff0c\u4ee5C\u8bed\u8a00\u548c\u6c47\u7f16\u8bed\u8a00\u5199\u6210\uff0c\u7b26\u5408POSIX\u6807\u51c6\uff0c\u6309GNU\u901a\u7528\u516c\u5171\u8bb8\u53ef\u8bc1\u53d1\u884c\u3002\r\n\r\nLinux kernel 5.3.8\u53ca\u66f4\u65e9\u7248\u672c\u5b58\u5728\u5185\u5b58\u6cc4\u6f0f\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8ef-\u003efmt.sdr.reserved\u5728drivers/media/platform/rcar_drif.c\u4e2d\u7684rcar_drif_g_fmt_sdr_cap\u672a\u521d\u59cb\u5316\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u5185\u5b58\u6cc4\u6f0f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Linux kernel\u5185\u5b58\u6cc4\u6f0f\u6f0f\u6d1e\uff08CNVD-2019-39688\uff09\u7684\u8865\u4e01",
"products": {
"product": "Linux Linux kernel \u003c=5.3.8"
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-18786",
"serverity": "\u4f4e",
"submitTime": "2019-11-06",
"title": "Linux kernel\u5185\u5b58\u6cc4\u6f0f\u6f0f\u6d1e\uff08CNVD-2019-39688\uff09"
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.