CVE-2019-1010066: High severity llnl model specific registers-safe vulnerability
Lawrence Livermore National Laboratory msr-safe v1.1.0 is affected by: Incorrect Access Control. The impact is: An attacker could modify model specific registers. The component is: ioctl handling. The attack vector is: An attacker could exploit a bug in ioctl interface whitelist checking, in order to write to model specific registers, normally a function reserved for the root user. The fixed version is: v1.2.0.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1010066?
CVE-2019-1010066 is considered a high severity vulnerability due to the potential for an attacker to modify critical model specific registers.
How do I fix CVE-2019-1010066?
To remediate CVE-2019-1010066, upgrade to version 1.2.0 or later of the llnl model specific registers-safe package.
What components are affected by CVE-2019-1010066?
CVE-2019-1010066 affects the ioctl handling component of the llnl model specific registers-safe software.
What types of attacks are possible with CVE-2019-1010066?
An attacker could exploit CVE-2019-1010066 to gain unauthorized access to modify model specific registers.
Who is impacted by CVE-2019-1010066?
Any users or systems utilizing version 1.1.0 of the llnl model specific registers-safe software are impacted by CVE-2019-1010066.