Home

CVE-2019-2101

Description

In uvc_parse_standard_control of uvc_driver.c, there is a possible out-of-bound read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-111760968.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.107

Associated Vulnerability

VulnerabilityOS Platform
Linux kernel (USN-4094-1) linux-image-gcp_4.15.0.1040.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gcp_4.15.0.1040.54_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gke_4.15.0.1040.43_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gke_4.15.0.1040.54_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-kvm_4.15.0.1042.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oem_4.15.0.58.79_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oem_4.15.0.1050.54_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-azure_4.15.0.1055.58_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oracle_4.15.0.1021.15_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-oracle_4.15.0.1021.24_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-generic_4.15.0.58.60_i386.debLinux
Linux kernel (USN-4094-1) linux-image-generic_4.15.0.58.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-virtual_4.15.0.58.60_i386.debLinux
Linux kernel (USN-4094-1) linux-image-virtual_4.15.0.58.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-gke-4.15_4.15.0.1040.43_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency_4.15.0.58.60_i386.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency_4.15.0.58.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gcp_4.15.0-1040.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gcp_4.15.0-1040.42~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1040-gke_4.15.0-1040.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1042-kvm_4.15.0-1042.42_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1050-oem_4.15.0-1050.57_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1055-azure_4.15.0-1055.60_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64~16.04.1_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-generic_4.15.0-58.64~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-generic-hwe-16.04_4.15.0.58.79_i386.debLinux
Linux kernel (USN-4094-1) linux-image-generic-hwe-16.04_4.15.0.58.79_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-virtual-hwe-16.04_4.15.0.58.79_i386.debLinux
Linux kernel (USN-4094-1) linux-image-virtual-hwe-16.04_4.15.0.58.79_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1021-oracle_4.15.0-1021.23_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-1021-oracle_4.15.0-1021.23~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64~16.04.1_i386.debLinux
Linux kernel (USN-4094-1) linux-image-4.15.0-58-lowlatency_4.15.0-58.64~16.04.1_amd64.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency-hwe-16.04_4.15.0.58.79_i386.debLinux
Linux kernel (USN-4094-1) linux-image-lowlatency-hwe-16.04_4.15.0.58.79_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws_4.15.0.1047.46_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws-hwe_4.15.0.1047.47_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49~16.04.1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234