CVE-2019-15291

MEDIUM
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the drivers/media/usb/b2c2/flexcop-usb.c driver.

References

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html

http://www.openwall.com/lists/oss-security/2019/08/20/2

http://www.openwall.com/lists/oss-security/2019/08/22/1

https://security.netapp.com/advisory/ntap-20190905-0002/

https://syzkaller.appspot.com/bug?id=c0203bd72037d07493f4b7562411e4f5f4553a8f

Details

Source: MITRE

Published: 2019-08-20

Updated: 2019-09-06

Type: CWE-476

Risk Information

CVSS v2

Base Score: 4.9

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 3.9

Severity: MEDIUM

CVSS v3

Base Score: 4.6

Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 0.9

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 5.2.9 (inclusive)

Tenable Plugins

View all (26 total)

IDNameProductFamilySeverity
150533SUSE SLES11 Security Update : kernel (SUSE-SU-2019:14218-1)NessusSuSE Local Security Checks
critical
135525EulerOS 2.0 SP3 : kernel (EulerOS-SA-2020-1396)NessusHuawei Local Security Checks
critical
134645Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5569)NessusOracle Linux Local Security Checks
critical
134343Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2020-5560)NessusOracle Linux Local Security Checks
medium
134342Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5559)NessusOracle Linux Local Security Checks
medium
134240Debian DLA-2114-1 : linux-4.9 security updateNessusDebian Local Security Checks
critical
134024Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5541)NessusOracle Linux Local Security Checks
critical
133800Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4287-1)NessusUbuntu Local Security Checks
high
133797Ubuntu 18.04 LTS / 19.10 : Linux kernel vulnerabilities (USN-4284-1)NessusUbuntu Local Security Checks
high
133354Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4258-1)NessusUbuntu Local Security Checks
high
133293Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4254-1)NessusUbuntu Local Security Checks
high
133101Debian DLA-2068-1 : linux security updateNessusDebian Local Security Checks
critical
132741Slackware 14.2 : Slackware 14.2 kernel (SSA:2020-008-01)NessusSlackware Local Security Checks
high
132605EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1012)NessusHuawei Local Security Checks
critical
132360EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2693)NessusHuawei Local Security Checks
high
132071SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:3295-1)NessusSuSE Local Security Checks
high
131845EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-2353)NessusHuawei Local Security Checks
critical
131120SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2984-1)NessusSuSE Local Security Checks
critical
130950SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2950-1) (SACK Panic)NessusSuSE Local Security Checks
critical
130949SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2949-1)NessusSuSE Local Security Checks
critical
130452SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:2879-1)NessusSuSE Local Security Checks
high
130089SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2710-1)NessusSuSE Local Security Checks
high
130050SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2019:2706-1)NessusSuSE Local Security Checks
high
129845SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2648-1)NessusSuSE Local Security Checks
critical
129807openSUSE Security Update : the Linux Kernel (openSUSE-2019-2308)NessusSuSE Local Security Checks
high
129806openSUSE Security Update : the Linux Kernel (openSUSE-2019-2307)NessusSuSE Local Security Checks
high