{"id":"CVE-2019-18567","state":"PUBLISHED","title":"Bromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service","description":"Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.","publishedAt":"2020-02-03T17:55:36.028Z","updatedAt":"2024-09-16T18:28:52.865Z","severity":{"score":6.1,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","source":"airbus"},"assigner":"airbus","products":["Bromium Bromium client"],"affected":[{"vendor":"Bromium","product":"Bromium client","versions":[{"version":"4.0.3.2060","status":"affected"},{"version":"?< 4.0.3.2060","status":"affected"},{"version":"?>= 4.0.3.2060","status":"affected"},{"version":"< 4.1.7 Update 1","status":"affected"}]}],"references":["https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released","https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567"],"weaknesses":["CWE-362"],"ingestedAt":"2026-10-29T19:45:41.458Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/18xxx/CVE-2019-18567.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-18567","state":"PUBLISHED","datePublished":"2020-02-03T17:55:36.028Z","dateUpdated":"2024-09-16T18:28:52.865Z","assignerShortName":"airbus","assignerOrgId":"24a3c815-5f22-4d74-967a-30958d6466f4","dateReserved":"2019-10-28T00:00:00.000Z"},"containers":{"cna":{"title":"Bromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service","descriptions":[{"lang":"en","value":"Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service."}],"affected":[{"vendor":"Bromium","product":"Bromium client","versions":[{"version":"4.0.3.2060","status":"affected"},{"version":"?< 4.0.3.2060","status":"affected"},{"version":"?>= 4.0.3.2060","status":"affected"},{"version":"< 4.1.7 Update 1","status":"affected"}]}],"references":[{"url":"https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released","tags":["x_refsource_CONFIRM"]},{"url":"https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","version":"3.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-362","description":"CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"airbus","dateUpdated":"2020-02-04T15:10:32.000Z","orgId":"24a3c815-5f22-4d74-967a-30958d6466f4"},"credits":[{"lang":"en","value":"Nicolas DELHAYE from AIRBUS"}],"datePublic":"2019-09-10T00:00:00.000Z","source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.0.6"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cert@airbus.com","DATE_PUBLIC":"2019-09-10T00:00:00.000Z","ID":"CVE-2019-18567","STATE":"PUBLIC","TITLE":"Bromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Bromium client","version":{"version_data":[{"version_value":"4.0.3.2060"},{"version_value":"?< 4.0.3.2060"},{"version_value":"?>= 4.0.3.2060"},{"version_value":"< 4.1.7 Update 1"}]}}]},"vendor_name":"Bromium"}]}},"credit":[{"lang":"eng","value":"Nicolas DELHAYE from AIRBUS"}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service."}]},"generator":{"engine":"Vulnogram 0.0.6"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)"}]}]},"references":{"reference_data":[{"name":"https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released","refsource":"CONFIRM","url":"https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released"},{"name":"https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567","refsource":"MISC","url":"https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567"}]},"source":{"discovery":"INTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T01:54:14.467Z"}}]}}}