VULNERABILITY INTELLIGENCE
CVE-2019-5068
CVSS score4.4 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2019-11-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Description
An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.
Weakness classification
- CWE-277: Insecure Inherited Permissions
- CWE-732: Incorrect Permission Assignment for Critical Resource
Primary references
- talos-cna@cisco.com — Mailing List, Third Party Advisory
- talos-cna@cisco.com — Patch, Third Party Advisory
- talos-cna@cisco.com — Mailing List, Third Party Advisory
- talos-cna@cisco.com — Mailing List, Patch, Third Party Advisory
- talos-cna@cisco.com — Exploit, Third Party Advisory
- talos-cna@cisco.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory