Medium severity · published Nov 5, 2019
CVE-2019-5068
An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2
4.4
CVSS
0.5%
EPSS
No
On KEV
Description
An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
8.0 · source: NVD
LE
Leap · Opensuse
15.1 · source: NVD
ME
Mesa · Mesa3d
19.1.2 · source: NVD
UL
Ubuntu Linux · Canonical
18.04; 19.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-5068
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-5068
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00037.html
Patch
https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc
Mailing List
https://lists.debian.org/debian-lts-announce/2019/11/msg00013.html
Mailing List
https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857
Third Party Advisory
https://usn.ubuntu.com/4271-1/
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation