CVE-2019-10207

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-10207
A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10207 Issue Tracking Third Party Advisory
https://security.netapp.com/advisory/ntap-20200103-0001/
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

12 Feb 2023, 23:33

Type Values Removed Values Added
Summary A flaw was found in the Linux kernel’s Bluetooth implementation of UART. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash. A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2019-10207', 'name': 'https://access.redhat.com/security/cve/CVE-2019-10207', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2019:3517', 'name': 'https://access.redhat.com/errata/RHSA-2019:3517', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2020:1070', 'name': 'https://access.redhat.com/errata/RHSA-2020:1070', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1733874', 'name': 'https://bugzilla.redhat.com/show_bug.cgi?id=1733874', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2020:1016', 'name': 'https://access.redhat.com/errata/RHSA-2020:1016', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2019:3309', 'name': 'https://access.redhat.com/errata/RHSA-2019:3309', 'tags': [], 'refsource': 'MISC'}

02 Feb 2023, 21:18

Type Values Removed Values Added
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2019-10207 -
  • (MISC) https://access.redhat.com/errata/RHSA-2019:3517 -
  • (MISC) https://access.redhat.com/errata/RHSA-2020:1070 -
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1733874 -
  • (MISC) https://access.redhat.com/errata/RHSA-2020:1016 -
  • (MISC) https://access.redhat.com/errata/RHSA-2019:3309 -
Summary A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash. A flaw was found in the Linux kernel’s Bluetooth implementation of UART. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call and cause the system to crash.
Information

Published : 2019-11-25 14:15

Updated : 2023-12-10 13:13

NVD link : CVE-2019-10207

Mitre link : CVE-2019-10207

CVE.ORG link : CVE-2019-10207

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference