CVE-2019-5068
MEDIUM 4.4EPSS 0.5%
An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.
- Affected
- Mesa 3D X11 Graphics library
- CVSS v3.1 NVD
- 4.4 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - CVSS v3.0 CISCO
- 5.1 MEDIUM
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - CVSS v2.0 NVD
- 3.6 LOW
AV:L/AC:L/Au:N/C:P/I:P/A:N - EPSS
- 0.48% chance of exploitation in the next 30 days, 40th percentile
- Published
- 2019-11-05
- Updated
- 2024-08-04
Proof-of-concept exploits (1)
Security advisories
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00037.html
- https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc
- https://lists.debian.org/debian-lts-announce/2019/11/msg00013.html
- https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html
- https://usn.ubuntu.com/4271-1