CVE-2019-20172: Buffer Overflow
Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20172?
CVE-2019-20172 is considered a high-severity vulnerability due to its potential to allow privilege escalation.
How do I fix CVE-2019-20172?
To mitigate CVE-2019-20172, users should update SerenityOS to versions released after December 30, 2019.
Who is affected by CVE-2019-20172?
CVE-2019-20172 affects all local users of SerenityOS prior to the 2019-12-30 release.
What type of vulnerability is CVE-2019-20172?
CVE-2019-20172 is classified as a security vulnerability that allows privilege escalation through memory management flaws.
What can an attacker do with CVE-2019-20172?
An attacker exploiting CVE-2019-20172 can overwrite a return address on the kernel stack, potentially gaining elevated privileges.