Lucene search

[email protected]CVE-2019-9371

HistorySep 27, 2019 - 7:15 p.m.

CVE-2019-9371

2019-09-2719:15:24

CWE-20

[email protected]

web.nvd.nist.gov

157

cve-2019-9371

resource exhaustion

libvpx

input validation

denial of service

android

nvd

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.009

Percentile

82.9%

JSON

In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254

Affected configurations

NVD

Node

googleandroidMatch10.0

Node

opensuseleapMatch15.1

Node

fedoraprojectfedoraMatch30

fedoraprojectfedoraMatch31

Node

debiandebian_linuxMatch9.0

debiandebian_linuxMatch10.0

Node

canonicalubuntu_linuxMatch16.04esm

canonicalubuntu_linuxMatch18.04lts

canonicalubuntu_linuxMatch19.04

VendorProductVersionCPE
googleandroid10.0cpe:/o:google:android:10.0:::

Vendor	Product	Version	CPE
google	android	10.0	cpe:/o:google:android:10.0:::

CNA Affected

[
  {
    "product": "Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Android-10"
      }
    ]
  }
]