CVE-2019-0136 : Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver

Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Published 2019-06-13 16:29:01

Updated 2020-08-24 17:37:01

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2019-0136

Intel » Proset/wireless Wifi
Versions before (<) 21.10
cpe:2.3:a:intel:proset\/wireless_wifi:*:*:*:*:*:*:*:*
Matching versions
When used together with: Google » Chrome Os » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A
When used together with: Microsoft » Windows 8.1 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-0136

EPSS FAQ

0.14%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 50 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-0136

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
3.3	LOW	AV:A/AC:L/Au:N/C:N/I:N/A:P	6.5	2.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.4	HIGH	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	2.8	4.0	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High

References for CVE-2019-0136

https://support.lenovo.com/us/en/product_security/LEN-27828

Intel PROSet/Wireless WiFi Software Vulnerability - US
Third Party Advisory
https://usn.ubuntu.com/4118-1/

USN-4118-1: Linux kernel (AWS) vulnerabilities | Ubuntu security notices

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

[SECURITY] [DLA 2114-1] linux-4.9 security update

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html

[SECURITY] [DLA 1919-1] linux-4.9 security update

CVEs referencing this url
http://www.securityfocus.com/bid/108777

Intel PROSet/Wireless WiFi Software CVE-2019-0136 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
https://usn.ubuntu.com/4145-1/

USN-4145-1: Linux kernel vulnerabilities | Ubuntu security notices

CVEs referencing this url
http://jvn.jp/en/jp/JVN75617741/index.html

JVN#75617741: Intel Dual Band Wireless-AC 8260 vulnerable to denial-of-service (DoS)
https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html

[SECURITY] [DLA 1919-2] linux-4.9 security update

CVEs referencing this url
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html

Kernel Live Patch Security Notice LSN-0058-1 ≈ Packet Storm

CVEs referencing this url
https://usn.ubuntu.com/4115-1/

USN-4115-1: Linux kernel vulnerabilities | Ubuntu security notices

CVEs referencing this url
https://usn.ubuntu.com/4147-1/

USN-4147-1: Linux kernel vulnerabilities | Ubuntu security notices

CVEs referencing this url
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00232.html

INTEL-SA-00232
https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html

[SECURITY] [DLA 1930-1] linux security update

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2019-0136

Products affected by CVE-2019-0136

Exploit prediction scoring system (EPSS) score for CVE-2019-0136

CVSS scores for CVE-2019-0136

References for CVE-2019-0136