Ubuntu.comUB:CVE-2019-5068CVE-2019-5068
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
Percentile
21.4%
An exploitable shared memory permissions vulnerability exists in the
functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can
access the shared memory without any specific permissions to trigger this
vulnerability.
Bugs
Notes
| Author | Note |
|---|---|
| sbeattie | mesa and its build dependencies have been updated for the HWE stack in bionic, so to fix this there will require no-change rebuilds in the security pocket for libdrm, libclc, wayland, and llvm-toolchain-9. |
References
launchpad.net/bugs/cve/CVE-2019-5068
lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html
nvd.nist.gov/vuln/detail/CVE-2019-5068
security-tracker.debian.org/tracker/CVE-2019-5068
talosintelligence.com/vulnerability_reports/TALOS-2019-0857
ubuntu.com/security/notices/USN-4271-1
www.cve.org/CVERecord?id=CVE-2019-5068
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
Percentile
21.4%