Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-14283
HistoryJul 26, 2019 - 1:15 p.m.

Integer overflow

2019-07-2613:15:00
PRIOn knowledge base
www.prio-n.com
4

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU creates the floppy device by default.

CPENameOperatorVersion
linux_kernellt5.2.3

References