Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2019-15540
HistoryAug 25, 2019 - 5:15 p.m.

CVE-2019-15540

2019-08-2517:15:10
CWE-787
mitre
web.nvd.nist.gov
193
cve-2019-15540
libmirage
cdemu
filter-cso
filter-stream.c
heap-based buffer overflow
root access
local linux user

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

44.0%

JSON

filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user.

Affected configurations

Nvd
Node
cdemulibmirageMatch3.2.2
VendorProductVersionCPE
cdemulibmirage3.2.2cpe:2.3:a:cdemu:libmirage:3.2.2:*:*:*:*:*:*:*

Related

openvas 5
cvelist 1
suse 3
prion 1
nessus 4
nvd 1
mageia 1
openvas
openvas
openSUSE: Security Advisory for libmirage (openSUSE-SU-2019:2040-1)
2019-09-01 00:00:00
openSUSE: Security Advisory for libmirage (openSUSE-SU-2019:2033-1)
2020-01-09 00:00:00
Huawei EulerOS: Security Advisory for libmirage (EulerOS-SA-2020-1090)
2020-01-23 00:00:00
cvelist
cvelist
CVE-2019-15540
2019-08-25 16:43:54
suse
suse
Security update for libmirage (moderate)
2019-08-31 00:00:00
Security update for libmirage (moderate)
2019-08-31 00:00:00
Security update for libmirage (moderate)
2019-09-06 00:00:00
prion
prion
Heap overflow
2019-08-25 17:15:00
nessus
nessus
openSUSE Security Update : libmirage (openSUSE-2019-2040)
2019-09-03 00:00:00
openSUSE Security Update : libmirage (openSUSE-2019-2033)
2019-09-03 00:00:00
EulerOS Virtualization for ARM 64 3.0.5.0 : libmirage (EulerOS-SA-2020-1090)
2020-01-13 00:00:00
nvd
nvd
CVE-2019-15540
2019-08-25 17:15:10
mageia
mageia
Updated libmirage packages fix security vulnerabilities
2019-12-24 15:24:34

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

44.0%

JSON
Related for CVE-2019-15540
openvas5cvelist1suse3prion1nessus4nvd1mageia1