Vulnerability Description
An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mesa3D | Mesa | 19.1.2 |
| Opensuse | Leap | 15.1 |
| Debian | Debian Linux | 8.0 |
| Canonical | Ubuntu Linux | 18.04 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00037.htmlMailing ListThird Party Advisory
- https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bcPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/11/msg00013.htmlMailing ListThird Party Advisory
- https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.htmlMailing ListPatchThird Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857ExploitThird Party Advisory
- https://usn.ubuntu.com/4271-1/Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00037.htmlMailing ListThird Party Advisory
- https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bcPatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/11/msg00013.htmlMailing ListThird Party Advisory
- https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.htmlMailing ListPatchThird Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857ExploitThird Party Advisory
- https://usn.ubuntu.com/4271-1/Third Party Advisory
FAQ
What is CVE-2019-5068?
CVE-2019-5068 is a vulnerability with a CVSS score of 4.4 (MEDIUM). An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to ...
How severe is CVE-2019-5068?
CVE-2019-5068 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-5068?
Check the references section above for vendor advisories and patch information. Affected products include: Mesa3D Mesa, Opensuse Leap, Debian Debian Linux, Canonical Ubuntu Linux.