CVE-2018-3989 MEDIUM

CVE-2018-3989

Vendor N/A
Product n/a
Published February 5, 2019
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

An exploitable kernel memory disclosure vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400).A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.

Key dates

02Disclosure timeline

February 5, 2019 CVE published
August 5, 2024 Record updated