CVE-2019-18178

{"id": "CVE-2019-18178", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-11-04T20:15:10.090", "references": [{"url": "https://sourceforge.net/p/freertos/bugs/199/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://sourceforge.net/p/freertos/bugs/199/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FF_Close() is defined in ff_file.c. The file handler pxFile is freed by ffconfigFREE, which (by default) is a macro definition of vPortFree(), but it is reused to flush modified file content from the cache to disk by the function FF_FlushCache()."}, {"lang": "es", "value": "Real Time Engineers FreeRTOS+FAT versi\u00f3n 160919a, presenta un uso de la memoria previamente liberada. La funci\u00f3n FF_Close() es definida en el archivo ff_file.c. El manejador de archivos pxFile es liberado por ffconfigFREE, que (por defecto) es una definici\u00f3n macro de la funci\u00f3n vPortFree(), pero es reusada para vaciar el contenido del archivo modificado desde la memoria cach\u00e9 hacia el disco por la funci\u00f3n FF_FlushCache()."}], "lastModified": "2024-11-21T04:32:46.407", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:amazon:freertos\\+fat:160919a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5834F9C6-A4FB-454E-9D9D-B3736A2AB6CA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}