{"id":"CVE-2019-5068","state":"PUBLISHED","title":"An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any spec","description":"An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.","publishedAt":"2019-11-05T21:11:55.000Z","updatedAt":"2024-08-04T19:47:56.664Z","severity":{"score":5.1,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","source":"talos"},"assigner":"talos","products":["n/a Mesa 3D X11 Graphics library"],"affected":[{"vendor":"n/a","product":"Mesa 3D X11 Graphics library","versions":[{"version":"19.1.2","status":"affected"}]}],"references":["https://lists.debian.org/debian-lts-announce/2019/11/msg00013.html","http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00037.html","https://usn.ubuntu.com/4271-1/","https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857","https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html","https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc"],"weaknesses":["CWE-277"],"ingestedAt":"2026-10-29T19:46:04.126Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/5xxx/CVE-2019-5068.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-5068","state":"PUBLISHED","datePublished":"2019-11-05T21:11:55.000Z","dateUpdated":"2024-08-04T19:47:56.664Z","assignerShortName":"talos","assignerOrgId":"b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b","dateReserved":"2019-01-04T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability."}],"affected":[{"vendor":"n/a","product":"Mesa 3D X11 Graphics library","versions":[{"version":"19.1.2","status":"affected"}]}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00013.html","name":"[debian-lts-announce] 20191115 [SECURITY] [DLA 1993-1] mesa security update","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00037.html","name":"openSUSE-SU-2020:0084","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://usn.ubuntu.com/4271-1/","name":"USN-4271-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857","tags":["x_refsource_MISC"]},{"url":"https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html","tags":["x_refsource_MISC"]},{"url":"https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-277","description":"CWE-277: Insecure Inherited Permissions","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"talos","dateUpdated":"2022-04-19T17:33:45.000Z","orgId":"b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"talos-cna@cisco.com","ID":"CVE-2019-5068","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Mesa 3D X11 Graphics library","version":{"version_data":[{"version_value":"19.1.2"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability."}]},"impact":{"cvss":{"baseScore":5.1,"baseSeverity":"Medium","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-277: Insecure Inherited Permissions"}]}]},"references":{"reference_data":[{"name":"[debian-lts-announce] 20191115 [SECURITY] [DLA 1993-1] mesa security update","refsource":"MLIST","url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00013.html"},{"name":"openSUSE-SU-2020:0084","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00037.html"},{"name":"USN-4271-1","refsource":"UBUNTU","url":"https://usn.ubuntu.com/4271-1/"},{"name":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857","refsource":"MISC","url":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857"},{"name":"https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html","refsource":"MISC","url":"https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html"},{"name":"https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc","refsource":"MISC","url":"https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00013.html","name":"[debian-lts-announce] 20191115 [SECURITY] [DLA 1993-1] mesa security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00037.html","name":"openSUSE-SU-2020:0084","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://usn.ubuntu.com/4271-1/","name":"USN-4271-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://gitlab.freedesktop.org/mesa/mesa/-/commit/02c3dad0f3b4d26e0faa5cc51d06bc50d693dcdc","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:47:56.664Z"}}]}}}