Out-of-bounds read in Linux kernel - CVE-2018-19985

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU20806

Out-of-bounds read in Linux kernel - CVE-2018-19985

Published: September 3, 2019 / Updated: September 3, 2019


Vulnerability identifier: #VU20806
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-19985
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition when the function "hso_get_config_data" in "drivers/net/usb/hso.c" reads "if_num" from the USB device (as a u8) and uses it to index a small array. An authenticated local user with physical access to the system can use a malicious USB, trigger out-of-bounds read error and read contents of memory on the system.


Affected software

Linux kernel
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Real Time
Ubuntu
Opensuse
IBM MQ Appliance
4769 Developer's Toolkit
linux (Ubuntu package)
linux-raspi2 (Ubuntu package)
linux-kvm (Ubuntu package)
linux-aws (Ubuntu package)
linux-snapdragon (Ubuntu package)
linux-hwe (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-oracle (Ubuntu package)
linux-gke-4.15 (Ubuntu package)
kernel-rt (Red Hat package)

How to mitigate CVE-2018-19985

Install updates from vendor's website.

Linux kernel - addressed in versions 4.4.170, 4.9.148, 4.14.91, 4.19.13, 4.20
IBM MQ Appliance - update to 9.2.0.6
linux (Ubuntu package) - addressed in versions 4.4.0-143.169, 4.15.0-60.67
linux-raspi2 (Ubuntu package) - addressed in versions 4.4.0-1104.112, 4.15.0-1044.47
linux-kvm (Ubuntu package) - addressed in versions 4.4.0-1041.47, 4.15.0-1043.43
linux-aws (Ubuntu package) - update to 4.4.0-1077.87
linux-snapdragon (Ubuntu package) - update to 4.4.0-1108.113
linux-hwe (Ubuntu package) - update to 4.15.0-60.67~16.04.1
linux-gcp (Ubuntu package) - update to 4.15.0-1041.43
linux-azure (Ubuntu package) - update to 4.15.0-1056.61
linux-oracle (Ubuntu package) - addressed in versions 4.15.0-1022.25~16.04.1, 4.15.0-1022.25
linux-gke-4.15 (Ubuntu package) - update to 4.15.0-1041.43
kernel-rt (Red Hat package) - update to 4.18.0-147.rt24.93.el8
4769 Developer's Toolkit - update to 7.3.44

External References

Related Security Bulletins