CVE-2019-0136
Vulnerability Summary
Timeline
Description
Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Metrics
- v4.0•HIGH•Score: 7.1CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- v3.0•HIGH•Score: 7.4CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- v2.0•LOW•Score: 3.3AV:A/AC:L/Au:N/C:N/I:N/A:P
EPSS Trends
Current EPSS score: 4.07%• Percentile: 90%
Affected Systems
- debian•linux
< 5.2.6-1 | < 5.2.6-1 | < 5.2.6-1 | < 5.2.6-1
- ubuntu•linux
all | < 4.4.0-165.193 | < 4.15.0-60.67
- ubuntu•linux-aws
< 4.4.0-1055.59 | < 4.4.0-1095.106 | < 4.15.0-1047.49
- ubuntu•linux-aws-fips
< 4.15.0-2018.18 | all
- ubuntu•linux-aws-hwe
< 4.15.0-1047.49~16.04.1
- ubuntu•linux-azure
< 4.15.0-1059.64~14.04.1 | < 4.15.0-1056.61 | < 5.0.0-1022.23~18.04.1
- ubuntu•linux-azure-fde
all
- ubuntu•linux-azure-fde-5.15
< 5.15.0-1114.123~20.04.1
- ubuntu•linux-azure-fips
< 4.15.0-2006.7 | all
- ubuntu•linux-bluefield
all
- ubuntu•linux-fips
< 4.4.0-1022.27 | all
- ubuntu•linux-gcp
< 4.15.0-1041.43 | < 4.15.0-1042.45
- ubuntu•linux-gcp-fips
all
- ubuntu•linux-gke-4.15
< 4.15.0-1041.43
- ubuntu•linux-gke-5.0
< 5.0.0-1020.20~18.04.1
- ubuntu•linux-hwe
< 4.15.0-60.67~16.04.1 | < 5.0.0-31.33~18.04.1
- ubuntu•linux-hwe-edge
all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-kvm
< 4.4.0-1059.66 | < 4.15.0-1043.43
- ubuntu•linux-lts-xenial
< 4.4.0-165.193~14.04.1
- ubuntu•linux-oem
< 4.15.0-1056.65
- ubuntu•linux-oem-osp1
< 5.0.0-1024.27
- ubuntu•linux-oracle
< 4.15.0-1022.25~16.04.1 | < 4.15.0-1022.25
- ubuntu•linux-raspi-realtime
all
- ubuntu•linux-raspi2
< 4.4.0-1123.132 | < 4.15.0-1044.47
- ubuntu•linux-realtime
all
- ubuntu•linux-riscv
all | all
- ubuntu•linux-snapdragon
< 4.4.0-1127.135 | < 4.15.0-1062.69
- intel•proset\/wireless_wifi
< 21.10
References (20)
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00232.html
- http://www.securityfocus.com/bid/108777
- https://support.lenovo.com/us/en/product_security/LEN-27828
- http://jvn.jp/en/jp/JVN75617741/index.html
- https://usn.ubuntu.com/4115-1/
- https://usn.ubuntu.com/4118-1/
- https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html
- https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html
- https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
- https://usn.ubuntu.com/4145-1/
- https://usn.ubuntu.com/4147-1/
- http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
- https://ubuntu.com/security/CVE-2019-0136
- https://ubuntu.com/security/notices/USN-4115-1
- https://ubuntu.com/security/notices/USN-4118-1
- https://ubuntu.com/security/notices/USN-4145-1
- https://ubuntu.com/security/notices/USN-4147-1
- https://www.cve.org/CVERecord?id=CVE-2019-0136
- https://security-tracker.debian.org/tracker/CVE-2019-0136