Out-of-bounds Read in Bromium Client
CVE-2019-18567
Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.
Vulnerability class: Race Condition
EPSS: 0.005 (37.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H.
Affected products
- Bromium Client — versions 4.0.3.2060, ?< 4.0.3.2060, ?>= 4.0.3.2060
- Hp Bromium
Weakness classification (CWE)
References
- cert@airbus.com (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
- cert@airbus.com (Exploit, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-18567?
- CVE-2019-18567 is a medium-severity vulnerability in Bromium Client, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 6.3/10. Published 2020-02-03.
- How severe is CVE-2019-18567?
- Medium severity. CVSS v3 base score is 6.3 out of 10.