CVE-2019-19536

EPSS 0.08%
Veröffentlicht 03.12.2019 16:15:13
Zuletzt bearbeitet 21.11.2024 04:34:55
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version < 5.2.9

Debian ≫ Debian Linux Version8.0

Opensuse ≫ Leap Version15.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.246

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.6	0.9	3.6	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

CWE-909 Missing Initialization of Resource

The product does not initialize a critical resource.

https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

Third Party Advisory

Mailing List

https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2019/12/03/4

Third Party Advisory

Mailing List

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.9

Vendor Advisory

Release Notes

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ead16e53c2f0ed946d82d4037c630e2f60f4ab69

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-19536

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-19536

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-19536

EUVD