CVE-2018-19824

Published: Dic 03, 2018 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2018-11499 Aliases: GSD-2018-19824

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,8

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

MEDIUM 4,6

Source: [email protected]

Access Vector: local

Access Complexity: low

Authentication: none

Confidentiality: partial

Integrity: partial

Availability: partial

Description

AI Translation Available

In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0006

Percentile

0,2th

Updated

EPSS Score Trend (Last 90 Days)

416

Use After Free

Stable

Abstraction: Variant Structure: Simple

Common Consequences

Security Scopes Affected:

Integrity Availability Confidentiality

Potential Impacts:

Modify Memory Dos: Crash, Exit, Or Restart Execute Unauthorized Code Or Commands

Applicable Platforms

Languages: C, C++, Memory-Unsafe

Likelihood of Exploit: High

View CWE Details

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 18.10

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 18.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Linux Kernel by Linux

Product Information

Vendor Linux

Product Linux Kernel

Version Range Affected

To 4.19.6 (inclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 12.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 14.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Debian Linux by Debian

Product Information

Vendor Debian

Product Debian Linux

Version 8.0

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

Operating System

Ubuntu Linux by Canonical

Product Information

Vendor Canonical

Product Ubuntu Linux

Version 16.04

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

https://access.redhat.com/errata/RHSA-2019:2703

https://bugzilla.suse.com/show_bug.cgi?id=1118152

Issue Tracking Patch Third Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1118152

https://github.com/torvalds/linux/commit/5f8cf712582617d523…

Patch Vendor Advisory

https://github.com/torvalds/linux/commit/5f8cf712582617d523120df67d392059eaf2fc…

https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound…

Patch Vendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git/commit/?id=5f8c…

https://lists.debian.org/debian-lts-announce/2019/03/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html

https://lists.debian.org/debian-lts-announce/2019/04/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html

https://lists.debian.org/debian-lts-announce/2019/05/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html

https://support.f5.com/csp/article/K98155950

Third Party Advisory

https://support.f5.com/csp/article/K98155950

https://usn.ubuntu.com/3879-1/

Third Party Advisory

https://usn.ubuntu.com/3879-1/

https://usn.ubuntu.com/3879-2/

Third Party Advisory

https://usn.ubuntu.com/3879-2/

https://usn.ubuntu.com/3930-1/

Third Party Advisory

https://usn.ubuntu.com/3930-1/

https://usn.ubuntu.com/3930-2/

Third Party Advisory

https://usn.ubuntu.com/3930-2/

https://usn.ubuntu.com/3931-1/

Third Party Advisory

https://usn.ubuntu.com/3931-1/

https://usn.ubuntu.com/3931-2/

Third Party Advisory

https://usn.ubuntu.com/3931-2/

https://usn.ubuntu.com/3933-1/

Third Party Advisory

https://usn.ubuntu.com/3933-1/

https://usn.ubuntu.com/3933-2/

Third Party Advisory

https://usn.ubuntu.com/3933-2/

http://www.securityfocus.com/bid/106109

Third Party Advisory VDB Entry

http://www.securityfocus.com/bid/106109

https://access.redhat.com/errata/RHSA-2019:2703

https://bugzilla.suse.com/show_bug.cgi?id=1118152

Issue Tracking Patch Third Party Advisory

https://bugzilla.suse.com/show_bug.cgi?id=1118152

https://github.com/torvalds/linux/commit/5f8cf712582617d523…

Patch Vendor Advisory

https://github.com/torvalds/linux/commit/5f8cf712582617d523120df67d392059eaf2fc…

https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound…

Patch Vendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git/commit/?id=5f8c…

https://lists.debian.org/debian-lts-announce/2019/03/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html

https://lists.debian.org/debian-lts-announce/2019/04/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html

https://lists.debian.org/debian-lts-announce/2019/05/msg000…

Mailing List Third Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html

https://support.f5.com/csp/article/K98155950

Third Party Advisory

https://support.f5.com/csp/article/K98155950

https://usn.ubuntu.com/3879-1/

Third Party Advisory

https://usn.ubuntu.com/3879-1/

https://usn.ubuntu.com/3879-2/

Third Party Advisory

https://usn.ubuntu.com/3879-2/

https://usn.ubuntu.com/3930-1/

Third Party Advisory

https://usn.ubuntu.com/3930-1/

https://usn.ubuntu.com/3930-2/

Third Party Advisory

https://usn.ubuntu.com/3930-2/

https://usn.ubuntu.com/3931-1/

Third Party Advisory

https://usn.ubuntu.com/3931-1/

https://usn.ubuntu.com/3931-2/

Third Party Advisory

https://usn.ubuntu.com/3931-2/

https://usn.ubuntu.com/3933-1/

Third Party Advisory

https://usn.ubuntu.com/3933-1/

https://usn.ubuntu.com/3933-2/

Third Party Advisory

https://usn.ubuntu.com/3933-2/

http://www.securityfocus.com/bid/106109

Third Party Advisory VDB Entry

http://www.securityfocus.com/bid/106109

CVE-2018-19824

Description

EPSS (Exploit Prediction Scoring System)

EPSS (Exploit Prediction Scoring System)

EPSS Score Trend (Last 90 Days)

Use After Free

Common Consequences

Applicable Platforms

Ubuntu Linux by Canonical

Product Information

Ubuntu Linux by Canonical

Product Information

Linux Kernel by Linux

Product Information

Ubuntu Linux by Canonical

Product Information

Ubuntu Linux by Canonical

Product Information

Debian Linux by Debian

Product Information

Ubuntu Linux by Canonical

Product Information

Iscriviti alla newsletter