CVE-2019-11884

Aliases:UBUNTU-CVE-2019-11884DEBIAN-CVE-2019-11884
Advisory lineage Upstream: 0 Downstream: 29
Modified
Published: 10 May 2019, 21:53
Last modified:04 Aug 2024, 23:10

Vulnerability Summary

Overall Risk (default)
low
13/100
CVSS Score
3.3 LOW
v3.1 (nvd)
EPSS Score
0.5% LOW
0% probability +0.45%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

10 May 2019, 21:53
Published
Vulnerability first disclosed
04 Aug 2024, 23:10
Last Modified
Vulnerability information updated

Description

The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a '\0' character.

CVSS Metrics

  • v4.0•MEDIUM•Score: 4.6CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
  • v3.1•LOW•Score: 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  • v2.0•LOW•Score: 2.1AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 0.50%• Percentile: 42%

Affected Systems

  • canonical•ubuntu_linux

    16.04 | 18.04 | 19.04

  • debian•linux

    < 4.19.37-4 | < 4.19.37-4 | < 4.19.37-4 | < 4.19.37-4

  • ubuntu•linux

    all | < 4.4.0-157.185 | < 4.15.0-55.60

  • ubuntu•linux-aws

    < 4.4.0-1054.58 | < 4.4.0-1090.101 | < 4.15.0-1047.49

  • ubuntu•linux-aws-fips

    < 4.15.0-2018.18 | all

  • ubuntu•linux-aws-hwe

    < 4.15.0-1047.49~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1059.64~14.04.1 | < 4.15.0-1051.56 | < 4.18.0-1025.27~18.04.1

  • ubuntu•linux-azure-fde

    all

  • ubuntu•linux-azure-fde-5.15

    < 5.15.0-1114.123~20.04.1

  • ubuntu•linux-azure-fips

    < 4.15.0-2006.7 | all

  • ubuntu•linux-bluefield

    all

  • ubuntu•linux-fips

    < 4.4.0-1015.20

  • ubuntu•linux-gcp

    < 4.15.0-1037.39~16.04.1 | < 4.15.0-1037.39

  • ubuntu•linux-gcp-fips

    all

  • ubuntu•linux-gke

    all

  • ubuntu•linux-gke-4.15

    < 4.15.0-1037.39

  • ubuntu•linux-hwe

    < 4.15.0-55.60~16.04.2 | < 5.0.0-23.24~18.04.1

  • ubuntu•linux-hwe-edge

    all

  • ubuntu•linux-intel-iot-realtime

    all

  • ubuntu•linux-kvm

    < 4.4.0-1052.59 | < 4.15.0-1039.39

  • ubuntu•linux-lts-xenial

    < 4.4.0-164.192~14.04.1

  • ubuntu•linux-oem

    < 4.15.0-1050.57

  • ubuntu•linux-oem-osp1

    < 5.0.0-1015.16

  • ubuntu•linux-oracle

    < 4.15.0-1018.20~16.04.1 | < 4.15.0-1018.20

  • ubuntu•linux-raspi-realtime

    all

  • ubuntu•linux-raspi2

    < 4.4.0-1117.126 | < 4.15.0-1041.44

  • ubuntu•linux-realtime

    all

  • ubuntu•linux-riscv

    all | all

  • ubuntu•linux-snapdragon

    < 4.4.0-1121.127 | < 4.15.0-1058.64

  • debian•debian_linux

    8.0 | 9.0

  • fedoraproject•fedora

    28 | 29 | 30

  • linux•linux_kernel

    < 5.0.15

  • opensuse•leap

    15.0 | 15.1 | 42.3

  • redhat•enterprise_linux

    8.0

  • redhat•enterprise_linux_eus

    8.1 | 8.2 | 8.4 | 8.6

  • redhat•enterprise_linux_for_real_time

    8.0

  • redhat•enterprise_linux_for_real_time_for_nfv_tus

    8.2 | 8.4 | 8.6

  • redhat•enterprise_linux_for_real_time_tus

    8.2 | 8.4 | 8.6

  • redhat•enterprise_linux_server_aus

    8.2 | 8.4 | 8.6

  • redhat•enterprise_linux_server_tus

    8.2 | 8.4 | 8.6

References (33)