Lucene search

MitreCVE-2019-12881

HistoryJun 18, 2019 - 11:15 p.m.

CVE-2019-12881

2019-06-1823:15:10

CWE-476

mitre

web.nvd.nist.gov

cve-2019-12881

linux kernel

ubuntu 18.04.2

denial of service

null pointer dereference

nvd

security issue

vulnerability

local users

crafted ioctl calls

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

5.1%

JSON

i915_gem_userptr_get_pages in drivers/gpu/drm/i915/i915_gem_userptr.c in the Linux kernel 4.15.0 on Ubuntu 18.04.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) or possibly have unspecified other impact via crafted ioctl calls to /dev/dri/card0.

Affected configurations

Nvd

Node

linuxlinux_kernelMatch4.15

AND

canonicalubuntu_linuxMatch18.04.2lts

VendorProductVersionCPE
linuxlinux_kernel4.15cpe:2.3:o:linux:linux_kernel:4.15:*:*:*:*:*:*:*
canonicalubuntu_linux18.04.2cpe:2.3:o:canonical:ubuntu_linux:18.04.2:*:*:*:lts:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	4.15	cpe:2.3:o:linux:linux_kernel:4.15:::::::*
canonical	ubuntu_linux	18.04.2	cpe:2.3:o:canonical:ubuntu_linux:18.04.2::::lts:::

References

www.securityfocus.com/bid/108873

gist.github.com/oxagast/472866fb2c3d439e10499d7141d0a520

security.netapp.com/advisory/ntap-20190710-0002/

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2019-12881