CVE-2019-15234

{"id": "CVE-2019-15234", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2020-04-27T17:15:13.127", "references": [{"url": "https://github.com/nathunandwani/shareit-cwe-789", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://shareit.one/blog/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/nathunandwani/shareit-cwe-789", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://shareit.one/blog/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "SHAREit through 4.0.6.177 does not check the full message length from the received packet header (which is used to allocate memory for the next set of data). This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941."}, {"lang": "es", "value": "SHAREit versiones hasta 4.0.6.177, no comprueba la longitud completa del mensaje del encabezado del paquete recibido (el cual es usado para asignar memoria para el siguiente conjunto de datos). Esto podr\u00eda conllevar a una denegaci\u00f3n de servicio del sistema debido a una asignaci\u00f3n de memoria no controlada. Esto es diferente de CVE-2019-14941."}], "lastModified": "2024-11-21T04:28:15.600", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ushareit:shareit:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "29DAAA74-D844-47E5-8770-76325CFE790C", "versionEndIncluding": "4.0.6.177"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}