Lucene search

K
cve[email protected]CVE-2019-20636
HistoryApr 08, 2020 - 2:15 p.m.

CVE-2019-20636

2020-04-0814:15:12
CWE-787
web.nvd.nist.gov
183
cve-2019-20636
linux kernel
input.c
out-of-bounds writes

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.3%

In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.

Affected configurations

NVD
Node
linuxlinux_kernelRange<3.16.83
OR
linuxlinux_kernelRange3.174.4.210
OR
linuxlinux_kernelRange4.54.9.210
OR
linuxlinux_kernelRange4.104.14.165
OR
linuxlinux_kernelRange4.154.19.96
OR
linuxlinux_kernelRange4.205.4.12
Node
netappcloud_backupMatch-
OR
netappsolidfireMatch-
OR
netappsteelstore_cloud_integrated_storageMatch-
OR
netappfas_8300Match-
OR
netappfas_8700Match-
OR
netappfas_a400Match-
OR
netappfas_baseboard_management_controller_a220Match-
OR
netappfas_baseboard_management_controller_a320Match-
OR
netappfas_baseboard_management_controller_a800Match-
OR
netappfas_baseboard_management_controller_c190Match-
OR
netapph300sMatch-
OR
netapph410sMatch-
OR
netapph500sMatch-
OR
netapph610cMatch-
OR
netapph610sMatch-
OR
netapph615cMatch-
OR
netapph700sMatch-

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.3%