CVE-2019-13631

Description

In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages.

Risk Information

Base Score
6.8
MODERATE
Vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.02

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-default-extra-3.0.101-108.101.1.i586.rpmLinux
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-default-extra-3.0.101-108.101.1.x86_64.rpmLinux
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-pae-extra-3.0.101-108.101.1.i586.rpmLinux
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-trace-extra-3.0.101-108.101.1.x86_64.rpmLinux
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-xen-extra-3.0.101-108.101.1.i586.rpmLinux
SUSE-SU-2019:14157-1(SUSE Linux Enterprise Server 11-EXTRA ) kernel-xen-extra-3.0.101-108.101.1.x86_64.rpmLinux
Linux kernel (USN-4115-1) linux-image-gcp_4.15.0.1041.55_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-gke_4.15.0.1041.44_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-gke_4.15.0.1041.55_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-kvm_4.15.0.1043.43_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-oem_4.15.0.60.81_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-azure_4.15.0.1056.59_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-oracle_4.15.0.1022.16_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-oracle_4.15.0.1022.25_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-generic_4.15.0.60.62_i386.debLinux
Linux kernel (USN-4115-1) linux-image-generic_4.15.0.60.62_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-virtual_4.15.0.60.62_i386.debLinux
Linux kernel (USN-4115-1) linux-image-virtual_4.15.0.60.62_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-gke-4.15_4.15.0.1041.44_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-lowlatency_4.15.0.60.62_i386.debLinux
Linux kernel (USN-4115-1) linux-image-lowlatency_4.15.0.60.62_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1041-gcp_4.15.0-1041.43_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1041-gke_4.15.0-1041.43_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1043-kvm_4.15.0-1043.43_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1056-azure_4.15.0-1056.61_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67_i386.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67~16.04.1_i386.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67~16.04.1_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-generic-hwe-16.04_4.15.0.60.81_i386.debLinux
Linux kernel (USN-4115-1) linux-image-generic-hwe-16.04_4.15.0.60.81_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-virtual-hwe-16.04_4.15.0.60.81_i386.debLinux
Linux kernel (USN-4115-1) linux-image-virtual-hwe-16.04_4.15.0.60.81_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1022-oracle_4.15.0-1022.25_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-1022-oracle_4.15.0-1022.25~16.04.1_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67_i386.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67~16.04.1_i386.debLinux
Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67~16.04.1_amd64.debLinux
Linux kernel (USN-4115-1) linux-image-lowlatency-hwe-16.04_4.15.0.60.81_i386.debLinux
Linux kernel (USN-4115-1) linux-image-lowlatency-hwe-16.04_4.15.0.60.81_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws_4.15.0.1047.46_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws-hwe_4.15.0.1047.47_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49~16.04.1_amd64.debLinux
Linux kernel (USN-4145-1) linux-image-aws_4.4.0.1095.99_amd64.debLinux
Linux kernel (USN-4145-1) linux-image-kvm_4.4.0.1059.59_amd64.debLinux
Linux kernel (USN-4145-1) linux-image-generic_4.4.0.165.173_i386.debLinux
Linux kernel (USN-4145-1) linux-image-generic_4.4.0.165.173_amd64.debLinux
Linux kernel (USN-4145-1) linux-image-virtual_4.4.0.165.173_i386.debLinux
Linux kernel (USN-4145-1) linux-image-virtual_4.4.0.165.173_amd64.debLinux
Linux kernel (USN-4145-1) linux-image-lowlatency_4.4.0.165.173_i386.debLinux
Linux kernel (USN-4145-1) linux-image-lowlatency_4.4.0.165.173_amd64.debLinux
Linux kernel (USN-4145-1) linux-image-4.4.0-1059-kvm_4.4.0-1059.66_amd64.debLinux
Linux kernel (USN-4145-1) linux-image-4.4.0-1095-aws_4.4.0-1095.106_amd64.debLinux
Linux kernel (USN-4145-1) linux-image-4.4.0-165-generic_4.4.0-165.193_i386.debLinux
Linux kernel (USN-4145-1) linux-image-4.4.0-165-generic_4.4.0-165.193_amd64.debLinux
Linux kernel (USN-4145-1) linux-image-4.4.0-165-lowlatency_4.4.0-165.193_i386.debLinux
Linux kernel (USN-4145-1) linux-image-4.4.0-165-lowlatency_4.4.0-165.193_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-aws_5.0.0.1018.19_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-gcp_5.0.0.1020.46_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-gke_5.0.0.1020.46_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-kvm_5.0.0.1019.19_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-azure_5.0.0.1022.21_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-generic_5.0.0.31.32_i386.debLinux
Linux kernel (USN-4147-1) linux-image-generic_5.0.0.31.32_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-gke-5.0_5.0.0.1020.9_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-virtual_5.0.0.31.32_i386.debLinux
Linux kernel (USN-4147-1) linux-image-virtual_5.0.0.31.32_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-lowlatency_5.0.0.31.32_i386.debLinux
Linux kernel (USN-4147-1) linux-image-lowlatency_5.0.0.31.32_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-1018-aws_5.0.0-1018.20_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-1019-kvm_5.0.0-1019.20_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-1020-gcp_5.0.0-1020.20_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-1020-gke_5.0.0-1020.20~18.04.1_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-1022-azure_5.0.0-1022.23_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-31-generic_5.0.0-31.33_i386.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-31-generic_5.0.0-31.33_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-31-generic_5.0.0-31.33~18.04.1_i386.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-31-generic_5.0.0-31.33~18.04.1_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-generic-hwe-18.04_5.0.0.31.88_i386.debLinux
Linux kernel (USN-4147-1) linux-image-generic-hwe-18.04_5.0.0.31.88_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-virtual-hwe-18.04_5.0.0.31.88_i386.debLinux
Linux kernel (USN-4147-1) linux-image-virtual-hwe-18.04_5.0.0.31.88_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-31-lowlatency_5.0.0-31.33_i386.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-31-lowlatency_5.0.0-31.33_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-31-lowlatency_5.0.0-31.33~18.04.1_i386.debLinux
Linux kernel (USN-4147-1) linux-image-5.0.0-31-lowlatency_5.0.0-31.33~18.04.1_amd64.debLinux
Linux kernel (USN-4147-1) linux-image-lowlatency-hwe-18.04_5.0.0.31.88_i386.debLinux
Linux kernel (USN-4147-1) linux-image-lowlatency-hwe-18.04_5.0.0.31.88_amd64.debLinux
Dtrace-modules-3.8.13-118.37.1.el6uek update (ELSA-2019-4741) dtrace-modules-3.8.13-118.37.1.el6uek-0.4.5-3.el6.x86_64.rpmLinux
Dtrace-modules-3.8.13-118.37.1.el7uek update (ELSA-2019-4741) dtrace-modules-3.8.13-118.37.1.el7uek-0.4.5-3.el7.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-doc-4.18.0-519.el8.noarch.rpmLinux
kernel update (TU-CESAS-0005) kernel-debug-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-devel-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-tools-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-headers-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-modules-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-tools-libs-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-debug-devel-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-modules-extra-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-debug-modules-extra-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0006) kernel-core-4.18.0-519.el8.x86_64.rpmLinux
python3 update (TU-CESAS-0006) python3-perf-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0006) kernel-debug-core-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0006) kernel-debug-modules-4.18.0-519.el8.x86_64.rpmLinux
kernel update (TU-CESAS-0006) kernel-abi-stablelists-4.18.0-519.el8.noarch.rpmLinux
kernel update (TU-CESAS-0007) kernel-cross-headers-4.18.0-519.el8.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update bpftool-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update bpftool-debuginfo-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-abi-stablelists-4.18.0-553.el8_10.noarch.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-core-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-cross-headers-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-debug-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-debug-core-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-debug-debuginfo-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-debug-devel-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-debug-modules-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-debug-modules-extra-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-debuginfo-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-debuginfo-common-x86_64-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-devel-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-doc-4.18.0-553.el8_10.noarch.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-headers-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-modules-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-modules-extra-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-tools-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-tools-debuginfo-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update kernel-tools-libs-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update perf-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update perf-debuginfo-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update python3-perf-4.18.0-553.el8_10.x86_64.rpmLinux
(RHSA-2024:3138)Moderate: security, bug fix, and enhancement update python3-perf-debuginfo-4.18.0-553.el8_10.x86_64.rpmLinux
Out-of-bounds Write Vulnerability (CVE-2019-13631)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234