CVE-2019-18567 MEDIUM

CVE-2019-18567: Bromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service

Vendor Bromium
Product Bromium client
Weakness CWE-362
Published February 3, 2020
Last update September 16, 2024

CVSS base score

6.1/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

What the vulnerability does

01Description

Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.

Key dates

02Disclosure timeline

February 3, 2020 CVE published
September 16, 2024 Record updated