CVE-2019-0682Integer Overflow or Wraparound in Microsoft Windows

Severity
7.8HIGHNVD
EPSS
0.3%
top 43.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 9
Latest updateMay 14

Description

An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0689, CVE-2019-0692, CVE-2019-0693, CVE-2019-0694.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages18 packages

CVEListV5microsoft/windows9 versions+8
NVDmicrosoft/windows1709, 1803+1
NVDmicrosoft/windows_104 versions+3
CVEListV5microsoft/windows_server4 versions+3

Patches

🔴Vulnerability Details

5
GHSA
GHSA-jvpf-v89v-c3gq: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation o2022-05-14
GHSA
GHSA-mv4q-v62j-c98m: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation o2022-05-14
GHSA
GHSA-h385-xcr8-fqcj: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation o2022-05-14
GHSA
GHSA-qrxw-vh87-hf43: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation o2022-05-14
GHSA
GHSA-2pjq-j823-9rpw: An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation o2022-05-14

📋Vendor Advisories

1
Microsoft
Windows Subsystem for Linux Elevation of Privilege Vulnerability2019-03-12
CVE-2019-0682 — Integer Overflow or Wraparound | cvebase