CVE-2019-19535
published 2019-12-03CVE-2019-19535: In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c…
medium4.6CVSS 3.1
AVPACLPRNUINSUCHINAN
In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 5.2.9-1 (bookworm) | linux 5.2.9-1 (bookworm) |
| exiv2 | exiv2 | >= 0 < 0.25-2.1ubuntu16.04.4 | 0.25-2.1ubuntu16.04.4 |
| exiv2 | exiv2 | >= 0 < 0.25-3.1ubuntu0.18.04.3 | 0.25-3.1ubuntu0.18.04.3 |
| linux | linux_kernel | < 5.2.9 | 5.2.9 |
| linux | linux_kernel | >= 0 < 5.2.9-1 | 5.2.9-1 |
| linux | linux_kernel | >= 0 < 5.2.9-1 | 5.2.9-1 |
| linux | linux_kernel | >= 0 < 5.2.9-1 | 5.2.9-1 |
| linux | linux_kernel | >= 0 < 5.2.9-1 | 5.2.9-1 |
| opensuse | leap | — | — |
| oracle | sd-wan_edge | — | — |
CVSS provenance
nvdv3.14.6MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
osv6.5MEDIUM