CVE-2019-15505

HIGH

Description

drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be remote via usbip or usbredir).

References

https://git.linuxtv.org/media_tree.git/commit/?id=0c4df39e504bf925ab666132ac3c98d6cbbe380b

https://lists.fedoraproject.org/archives/list/[email protected]/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/

https://lists.fedoraproject.org/archives/list/[email protected]/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/

https://lore.kernel.org/linux-media/[email protected]/

https://lore.kernel.org/lkml/[email protected]/

https://security.netapp.com/advisory/ntap-20190905-0002/

https://support.f5.com/csp/article/K28222050

https://support.f5.com/csp/article/K28222050?utm_source=f5support&utm_medium=RSS

https://usn.ubuntu.com/4157-1/

https://usn.ubuntu.com/4157-2/

https://usn.ubuntu.com/4162-1/

https://usn.ubuntu.com/4162-2/

https://usn.ubuntu.com/4163-1/

https://usn.ubuntu.com/4163-2/

Details

Source: MITRE

Published: 2019-08-23

Updated: 2019-09-04

Type: CWE-125

Risk Information

CVSS v2.0

Base Score: 10

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 10

Severity: HIGH

CVSS v3.0

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 3.9

Severity: CRITICAL

Tenable Plugins

View all (20 total)

ID	Name	Product	Family	Severity
144831	EulerOS Virtualization 3.0.2.6 : kernel (EulerOS-SA-2021-1056)	Nessus	Huawei Local Security Checks	critical
141374	OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0044)	Nessus	OracleVM Local Security Checks	critical
141207	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5866)	Nessus	Oracle Linux Local Security Checks	critical
137291	Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5715)	Nessus	Oracle Linux Local Security Checks	critical
134240	Debian DLA-2114-1 : linux-4.9 security update	Nessus	Debian Local Security Checks	critical
133101	Debian DLA-2068-1 : linux security update	Nessus	Debian Local Security Checks	critical
131845	EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-2353)	Nessus	Huawei Local Security Checks	critical
131120	SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2984-1)	Nessus	SuSE Local Security Checks	critical
130950	SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2950-1) (SACK Panic)	Nessus	SuSE Local Security Checks	critical
130949	SUSE SLES12 Security Update : kernel (SUSE-SU-2019:2949-1)	Nessus	SuSE Local Security Checks	critical
130815	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2019-2106)	Nessus	Huawei Local Security Checks	critical
130751	Slackware 14.2 : Slackware 14.2 kernel (SSA:2019-311-01)	Nessus	Slackware Local Security Checks	critical
130736	EulerOS 2.0 SP3 : kernel (EulerOS-SA-2019-2274)	Nessus	Huawei Local Security Checks	critical
130663	EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2201)	Nessus	Huawei Local Security Checks	critical
130152	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4163-1)	Nessus	Ubuntu Local Security Checks	critical
130151	Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4162-1)	Nessus	Ubuntu Local Security Checks	critical
130147	Ubuntu 18.04 LTS : Linux kernel (HWE) vulnerabilities (USN-4157-2)	Nessus	Ubuntu Local Security Checks	critical
130003	Ubuntu 19.04 : Linux kernel vulnerabilities (USN-4157-1)	Nessus	Ubuntu Local Security Checks	critical
128485	Fedora 29 : kernel / kernel-headers / kernel-tools (2019-97380355ae)	Nessus	Fedora Local Security Checks	critical
128481	Fedora 30 : kernel / kernel-headers / kernel-tools (2019-4c91a2f76e)	Nessus	Fedora Local Security Checks	critical