CVE-2019-0689: Integer Overflow

Published Apr 8, 2019

Updated

An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0692, CVE-2019-0693, CVE-2019-0694.

Affected Software

6 affected components

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows Server 2016=1709

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0689

Event History

Apr 8, 2019

CVE Published

via MITRE·11:19 PM

Data Sourced

via MITRE·11:19 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0689?

CVE-2019-0689 is rated as important due to its potential for elevation of privilege.

How do I fix CVE-2019-0689?

To mitigate CVE-2019-0689, you should apply the latest updates and patches provided by Microsoft for affected Windows versions.

Which versions of Windows are affected by CVE-2019-0689?

CVE-2019-0689 affects Windows 10 versions 1709, 1803, 1809, and Windows Server 2016 versions 1709, 1803, and 2019.

Can CVE-2019-0689 lead to unauthorized access?

Yes, CVE-2019-0689 can allow an attacker to gain elevated privileges, potentially leading to unauthorized access.

Is there a workaround for CVE-2019-0689?

Currently, the best mitigation for CVE-2019-0689 is to install the security updates provided by Microsoft, as there are no known effective workarounds.