Lucene search

K
ubuntuUbuntuUSN-4271-1
HistoryFeb 06, 2020 - 12:00 a.m.

Mesa vulnerability

2020-02-0600:00:00
ubuntu.com
80

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

21.4%

Releases

  • Ubuntu 19.10
  • Ubuntu 18.04 ESM

Packages

  • mesa - free implementation of the EGL API

Details

Tim Brown discovered that Mesa incorrectly handled shared memory
permissions. A local attacker could use this issue to obtain and possibly
alter sensitive information belonging to another user.

OSVersionArchitecturePackageVersionFilename
Ubuntu19.10noarchlibd3dadapter9-mesa< 19.2.8-0ubuntu0~19.10.2UNKNOWN
Ubuntu19.10noarchlibd3dadapter9-mesa-dbgsym< 19.2.8-0ubuntu0~19.10.2UNKNOWN
Ubuntu19.10noarchlibd3dadapter9-mesa-dev< 19.2.8-0ubuntu0~19.10.2UNKNOWN
Ubuntu19.10noarchlibegl-mesa0< 19.2.8-0ubuntu0~19.10.2UNKNOWN
Ubuntu19.10noarchlibegl-mesa0-dbgsym< 19.2.8-0ubuntu0~19.10.2UNKNOWN
Ubuntu19.10noarchlibegl1-mesa< 19.2.8-0ubuntu0~19.10.2UNKNOWN
Ubuntu19.10noarchlibegl1-mesa-dev< 19.2.8-0ubuntu0~19.10.2UNKNOWN
Ubuntu19.10noarchlibgbm-dev< 19.2.8-0ubuntu0~19.10.2UNKNOWN
Ubuntu19.10noarchlibgbm1< 19.2.8-0ubuntu0~19.10.2UNKNOWN
Ubuntu19.10noarchlibgbm1-dbgsym< 19.2.8-0ubuntu0~19.10.2UNKNOWN
Rows per page:
1-10 of 721

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

21.4%