CVE-2019-18567

Katalog CVE

CVSS 6.3 · Medium EPSS 0,47%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada hp bromium. Skor CVSS 3.1 6.3 (Medium) menurut NVD.

Deskripsi (NVD)

Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.

Rincian

Terbit di NVD

3 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.3 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 38,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.bromium.com/s/article/Bromium-Secure-Platform-4-1-Update-7-Released release notes · advisory vendor
• https://airbus-cyber-security.com/dive-into-a-kernel-bromium-race-condition-cve-2019-18567 exploit · advisory pihak ketiga