CVE-2019-3819
Aliases:UBUNTU-CVE-2019-3819DEBIAN-CVE-2019-3819CGA-23w5-3r9c-fv6jCGA-24cq-9487-q595CGA-2774-q4hh-qjm8CGA-29qm-27xp-rwr9CGA-2fp4-mrx9-8wm3CGA-2qqx-wc28-m3h9CGA-2w8m-xv36-mvpcCGA-355g-r9cp-577gCGA-359q-wqqc-ch8mCGA-39hx-xf5j-94qxCGA-44pc-h7pq-jfvpCGA-4ch3-5675-6pj3CGA-4f5v-p79p-x444CGA-4g7r-4c4f-9gwxCGA-4v36-v7q8-6q9hCGA-4v9v-g6pg-x6mmCGA-53v5-hjv4-5fj5CGA-59rf-2hwg-7jhrCGA-5rjm-4h53-qxphCGA-6285-5j8h-xq7gCGA-63xr-rjcj-qf5vCGA-66qg-3m78-v8phCGA-67x5-8345-7mm7CGA-68g5-8r6w-ww66CGA-6cc2-2hmh-j9rcCGA-6hg3-3r7q-w5h8CGA-6v3j-6r47-2v76CGA-6x4f-8fv8-j23mCGA-72rq-qx4p-g9cqCGA-74fc-qhr8-pvfrCGA-7chj-fxj2-537gCGA-7fwp-pg3g-659pCGA-7v33-cvx4-w33xCGA-7v46-xphf-j53rCGA-7xvc-xvwj-c5wmCGA-83j8-m6mh-945jCGA-8935-6m95-9r68CGA-8c82-rc32-j639CGA-8cx2-86cc-fw44CGA-8fx3-ww9m-95x8CGA-8j96-wr54-r8frCGA-8m2f-5vp3-r2vjCGA-8p4j-7r3p-3xm3CGA-8rfg-m6p9-vvcxCGA-8x4h-88v2-c4mhCGA-9783-7gmf-4hhfCGA-9f9v-wmhq-hg4jCGA-9rjq-xxxj-62qxCGA-9xgg-pfm8-2hprCGA-c3hg-9jqp-3pq7CGA-c3r2-3389-jw55CGA-c7gr-9pcf-55fvCGA-cj5m-g489-c424CGA-cw2w-6qhw-4wg5CGA-f55f-2hm5-hwm5CGA-fcw2-fwq9-g8f4CGA-fgh5-xcxq-pq24CGA-fpp6-qrpr-cvgvCGA-fwm5-w46m-cfv7CGA-g9w3-j6wr-p434CGA-gf7x-2vxr-635rCGA-gg46-qxg7-3cgvCGA-gg47-p837-xwp7CGA-gw33-43cr-q8rmCGA-gw35-wpr5-gxr4CGA-h6x6-xj84-vp3hCGA-hhjc-g7jx-9wfjCGA-hppc-7855-w92xCGA-hqjj-pxvp-fxfrCGA-jg44-5pqw-f6r5CGA-jg8r-ffmq-f88jCGA-jgvv-x3j8-hgggCGA-jmrw-qxfh-hg32CGA-jpgq-v8fv-frg3CGA-jvh7-jqhv-mq27CGA-jvq3-694q-hh2hCGA-m2c3-724r-xmcqCGA-m3g2-48x5-w68rCGA-mjmh-hqv7-j25qCGA-mjp2-qwfx-px37CGA-mqvp-729q-fw85CGA-mvxm-7fpx-8j5qCGA-p3c3-g639-69q8CGA-p3xg-jpv2-jf92CGA-p57r-8pfc-ww2xCGA-p6r9-hpp8-jvw9CGA-p73f-3jjm-p9wxCGA-pcpw-r62h-cghgCGA-phrw-98pg-w9vcCGA-pm47-5hv7-q8mhCGA-q6g3-r958-7c7pCGA-q79f-3j35-3w9pCGA-q947-j7vp-q457CGA-qcpp-cjv8-2fh6CGA-qfc3-pq78-m9j8CGA-qgx8-9wgj-wfghCGA-qhf2-28h8-36jvCGA-qhrj-pf44-gr82CGA-qv58-5c42-7rp7CGA-r3pv-mhv6-pcqgCGA-r3x4-57xp-6pxrCGA-r448-8p65-w4h9CGA-r7j5-59rq-hmghCGA-r894-8g5j-frhvCGA-v38q-gwc2-6vg3CGA-v9qq-6746-jgj4CGA-vcwp-mmjv-372fCGA-vf2m-rm4g-8r6jCGA-vmhp-f22p-vphgCGA-w249-9c9x-7f98CGA-w9cg-2w2f-646jCGA-wm7v-75h9-85jmCGA-x74p-hgh8-5hq2CGA-x978-8658-44w4CGA-xfhf-j5f5-p64vCGA-xhg9-4596-4wr8CGA-236g-5wp8-mqx7CGA-f82j-94pp-p3f5CGA-4394-8w63-gh46CGA-5fwp-w2xw-p3fhCGA-5x6r-f6pr-8jcvCGA-6mp5-6xh2-35vgCGA-6pgx-7j77-5xc8CGA-8ghp-9vm5-54wwCGA-98w6-hwqq-974rCGA-gq4g-c7jj-9qvwCGA-h88j-hv4p-82m9CGA-m859-hqq7-fgx2CGA-rj67-gg7m-3mm8CGA-rq35-5gvv-27j4CGA-wfhx-5pvp-j2v9CGA-ch7c-jx43-vc69CGA-r55q-pvrf-q5f7CGA-6989-rx62-rq5fCGA-h77r-f3hm-rcq6CGA-pmm5-h4r8-543fCGA-wrf8-r46p-892qCGA-9jgx-qgq8-w7p3CGA-jp84-c4rr-f3xfCGA-xpqg-p83x-8xq3
Advisory lineage Upstream: 0 Downstream: 18
Modified
Published: 25 Jan 2019, 18:00
Last modified:04 Aug 2024, 19:19
Vulnerability Summary
Overall Risk (default)
low
20/100 CVSS Score
4.9 MEDIUM
v2.0 (nvd)
EPSS Score
0.46% LOW
0% probability +0.45%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
25 Jan 2019, 18:00
Published
Vulnerability first disclosed
04 Aug 2024, 19:19
Last Modified
Vulnerability information updated
Description
A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user ("root") can cause a system lock up and a denial of service. Versions from v4.18 and newer are vulnerable.
CVSS Metrics
- v3.1•MEDIUM•Score: 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- v3.0•MEDIUM•Score: 4.2CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
- v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C
EPSS Trends
Current EPSS score: 0.46%• Percentile: 39%
Techniques & Countermeasures
- CWE-835•Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Affected Systems
- chainguard•hyperv-daemons-6.18
< 0
- chainguard•hyperv-daemons-generic
< 0
- chainguard•linux-aws-6.12
< 0 | < 6.12.65-r0
- chainguard•linux-aws-6.12-boot-installed
< 0
- chainguard•linux-aws-6.12-fips-boot-installed
< 0
- chainguard•linux-aws-6.12-headers
< 0
- chainguard•linux-aws-6.12-modules
< 0
- chainguard•linux-aws-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-aws-6.18-boot-installed
< 0
- chainguard•linux-aws-6.18-fips-boot-installed
< 0
- chainguard•linux-aws-6.18-headers
< 0
- chainguard•linux-aws-6.18-modules
< 0
- chainguard•linux-aws-generic
< 6.18.5-r0 | < 0
- chainguard•linux-aws-generic-boot-installed
< 0
- chainguard•linux-aws-generic-fips-boot-installed
< 0
- chainguard•linux-aws-generic-headers
< 0
- chainguard•linux-aws-generic-modules
< 0
- chainguard•linux-azure-6.12
< 6.12.65-r1 | < 0
- chainguard•linux-azure-6.18
< 0
- chainguard•linux-azure-6.18-boot-installed
< 0
- chainguard•linux-azure-6.18-fips-boot-installed
< 0
- chainguard•linux-azure-6.18-headers
< 0
- chainguard•linux-azure-6.18-modules
< 0
- chainguard•linux-azure-generic
< 6.18.5-r0 | < 0
- chainguard•linux-azure-generic-boot-installed
< 0
- chainguard•linux-azure-generic-fips-boot-installed
< 0
- chainguard•linux-azure-generic-headers
< 0
- chainguard•linux-azure-generic-modules
< 0
- chainguard•linux-desktop-6.18
all
- chainguard•linux-desktop-6.18-bootc
all
- chainguard•linux-desktop-6.18-bootc-boot-installed
all
- chainguard•linux-desktop-6.18-headers
all
- chainguard•linux-desktop-6.18-modules
all
- chainguard•linux-desktop-7.2
all
- chainguard•linux-desktop-7.2-bootc
all
- chainguard•linux-desktop-7.2-modules
all
- chainguard•linux-firecracker-6.18
all
- chainguard•linux-gcp-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-gcp-6.18
< 0 | < 6.18.10-r0
- chainguard•linux-gcp-6.18-boot-installed
< 0
- chainguard•linux-gcp-6.18-fips-boot-installed
< 0
- chainguard•linux-gcp-6.18-headers
< 0
- chainguard•linux-gcp-6.18-modules
< 0
- chainguard•linux-gcp-generic
< 6.18.5-r0 | < 0
- chainguard•linux-gcp-generic-boot-installed
< 0
- chainguard•linux-gcp-generic-fips-boot-installed
< 0
- chainguard•linux-gcp-generic-headers
< 0
- chainguard•linux-gcp-generic-modules
< 0
- chainguard•linux-qemu-6.12
< 6.12.71-r0 | < 0
- chainguard•linux-qemu-6.18
< 6.18.10-r0
Showing first 50 affected entries in server-rendered view.
References (19)
- http://www.securityfocus.com/bid/106730
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3819
- https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html
- https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html
- https://usn.ubuntu.com/3932-1/
- https://usn.ubuntu.com/3932-2/
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html
- https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html
- https://usn.ubuntu.com/4115-1/
- https://usn.ubuntu.com/4118-1/
- https://ubuntu.com/security/CVE-2019-3819
- https://lore.kernel.org/lkml/20190129105835.4723-1-vdronov@redhat.com/
- https://git.kernel.org/pub/scm/linux/kernel/git/hid/hid.git/commit/?id=13054abbaa4f1fd4e6f3b4b63439ec033b4c8035
- https://ubuntu.com/security/notices/USN-3932-1
- https://ubuntu.com/security/notices/USN-3932-2
- https://ubuntu.com/security/notices/USN-4115-1
- https://ubuntu.com/security/notices/USN-4118-1
- https://www.cve.org/CVERecord?id=CVE-2019-3819
- https://security-tracker.debian.org/tracker/CVE-2019-3819