CVE-2019-20806

EPSS 0.12%
Published 27.05.2020 12:15:10
Last modified 21.11.2024 04:39:24
Source cve@mitre.org
CVE-Watchlists
Login
Open
Login

An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka CID-2e7682ebfc75.

Affected products Warnungen 0 Metrics 3 CWE 1 References 10

Data is provided by the National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version < 5.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.12%	0.276

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.4	0.8	3.6	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:N/I:N/A:P

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html

https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html

https://www.debian.org/security/2020/dsa-4698

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2

Vendor Advisory

Release Notes

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2e7682ebfc750177a4944eeb56e97a3f05734528

Patch

Vendor Advisory

https://github.com/torvalds/linux/commit/2e7682ebfc750177a4944eeb56e97a3f05734528

Patch

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200619-0001/

https://nvd.nist.gov/vuln/detail/CVE-2019-20806

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-20806

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-20806

EUVD