CVE-2019-3819

Advisory lineage Upstream: 0 Downstream: 18
Modified
Published: 25 Jan 2019, 18:00
Last modified:04 Aug 2024, 19:19

Vulnerability Summary

Overall Risk (default)
low
20/100
CVSS Score
4.9 MEDIUM
v2.0 (nvd)
EPSS Score
0.02% LOW
0% probability +0.02%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

25 Jan 2019, 18:00
Published
Vulnerability first disclosed
04 Aug 2024, 19:19
Last Modified
Vulnerability information updated

Description

A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user ("root") can cause a system lock up and a denial of service. Versions from v4.18 and newer are vulnerable.

CVSS Metrics

  • v3.1•MEDIUM•Score: 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
  • v3.0•MEDIUM•Score: 4.2CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
  • v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.02%• Percentile: 7%

Techniques & Countermeasures

  • CWE-835•Loop with Unreachable Exit Condition ('Infinite Loop')

    The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 18.04

  • debian•debian_linux

    8.0

  • linux•linux_kernel

    ≥ 4.18

  • opensuse•leap

    15.0

  • the linux foundation•kernel:

    from v4.18 and newer

References (10)