CVE-2019-18568 - Vulnerability Details - OpenCVE

Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a restricted user.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction Required

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Avira	Free Antivirus
Microsoft	Windows

Configuration 1 [-]

AND

cpe:2.3:a:avira:free_antivirus:15.0.1907.1514:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://support.avira.com/hc/en-us/articles/360000109798-Avira-Antivirus-for-Windows

History

No history.

MITRE

Status: PUBLISHED

Assigner: airbus

Published: 2019-12-31T19:28:32.868744Z

Updated: 2024-09-17T02:31:40.755Z

Reserved: 2019-10-28T00:00:00

Link: CVE-2019-18568

Vulnrichment

No data.

NVD

Status : Modified

Published: 2019-12-31T20:15:13.060

Modified: 2024-11-21T04:33:19.070

Link: CVE-2019-18568

Redhat

No data.

{"containers": {"cna": {"affected": [{"platforms": ["x86"], "product": "Antivirus Free Antivirus", "vendor": "AVIRA", "versions": [{"lessThanOrEqual": "15.0.1907.1514", "status": "affected", "version": "Antivirus Free Antivirus", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Nicolas Delhaye from AIRBUS"}], "datePublic": "2019-07-24T00:00:00", "descriptions": [{"lang": "en", "value": "Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a restricted user."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-680", "description": "CWE-680 Integer Overflow to Buffer Overflow", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2019-12-31T19:28:32", "orgId": "24a3c815-5f22-4d74-967a-30958d6466f4", "shortName": "airbus"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://support.avira.com/hc/en-us/articles/360000109798-Avira-Antivirus-for-Windows"}], "source": {"discovery": "INTERNAL"}, "title": "Avira Free Antivirus is proned to a local privilege escalation through the execution of kernel code from a restricted user.", "x_generator": {"engine": "Vulnogram 0.0.6"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cert@airbus.com", "DATE_PUBLIC": "2019-07-24T00:00:00.000Z", "ID": "CVE-2019-18568", "STATE": "PUBLIC", "TITLE": "Avira Free Antivirus is proned to a local privilege escalation through the execution of kernel code from a restricted user."}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Antivirus Free Antivirus", "version": {"version_data": [{"platform": "x86", "version_affected": "<=", "version_name": "Antivirus Free Antivirus", "version_value": "15.0.1907.1514"}]}}]}, "vendor_name": "AVIRA"}]}}, "credit": [{"lang": "eng", "value": "Nicolas Delhaye from AIRBUS"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a restricted user."}]}, "generator": {"engine": "Vulnogram 0.0.6"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-680 Integer Overflow to Buffer Overflow"}]}]}, "references": {"reference_data": [{"name": "https://support.avira.com/hc/en-us/articles/360000109798-Avira-Antivirus-for-Windows", "refsource": "CONFIRM", "url": "https://support.avira.com/hc/en-us/articles/360000109798-Avira-Antivirus-for-Windows"}]}, "source": {"discovery": "INTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T01:54:14.518Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.avira.com/hc/en-us/articles/360000109798-Avira-Antivirus-for-Windows"}]}]}, "cveMetadata": {"assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4", "assignerShortName": "airbus", "cveId": "CVE-2019-18568", "datePublished": "2019-12-31T19:28:32.868744Z", "dateReserved": "2019-10-28T00:00:00", "dateUpdated": "2024-09-17T02:31:40.755Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:avira:free_antivirus:15.0.1907.1514:*:*:*:*:*:*:*", "matchCriteriaId": "365D2198-E6CD-4789-A64F-F19E79E666FB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a restricted user."}, {"lang": "es", "value": "Avira Free Antivirus versi\u00f3n 15.0.1907.1514, es propenso a una escalada de privilegios locales por medio de una ejecuci\u00f3n de c\u00f3digo del kernel desde un usuario restringido."}], "id": "CVE-2019-18568", "lastModified": "2024-11-21T04:33:19.070", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L", "version": "3.0"}, "exploitabilityScore": 1.5, "impactScore": 6.0, "source": "cert@airbus.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.0, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-12-31T20:15:13.060", "references": [{"source": "cert@airbus.com", "tags": ["Release Notes"], "url": "https://support.avira.com/hc/en-us/articles/360000109798-Avira-Antivirus-for-Windows"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://support.avira.com/hc/en-us/articles/360000109798-Avira-Antivirus-for-Windows"}], "sourceIdentifier": "cert@airbus.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-680"}], "source": "cert@airbus.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}