CVE-2019-18567 - Bromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service

Back Back to CVE browser

MEDIUM

Bromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service

Published Feb 3, 2020

6.3

MEDIUM

CVSS 3.1

EPSS 0.47%

Description

Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.

Affected products

Vendor Bromium Product Bromium client Default
n/a
- Version
  4.0.3.2060
  Status
  affected
  Constraints
  -
- Version
  < 4.1.7 Update 1
  Status
  affected
  Constraints
  -
- Version
  ?< 4.0.3.2060
  Status
  affected
  Constraints
  -
- Version
  ?>= 4.0.3.2060
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Bromium

Bromium client

n/a

Version	Status	Constraints
4.0.3.2060	affected	-
< 4.1.7 Update 1	affected	-
?< 4.0.3.2060	affected	-
?>= 4.0.3.2060	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-362

Race Condition

References (3)

https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567
x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8316
Advisory
https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released
x_refsource_CONFIRMRelease NotesVendor Advisory

Link	Providers	Tags
https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8316		Advisory
https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released		x_refsource_CONFIRMRelease NotesVendor Advisory