CVE-2019-5068

Name	CVE-2019-5068
Description	An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the shared memory without any specific permissions to trigger this vulnerability.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
References	DLA-1993-1
NVD severity	low
Debian Bugs	944298

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
mesa (PTS)	jessie	10.3.2-1+deb8u1	vulnerable
	jessie (security)	10.3.2-1+deb8u2	fixed
	stretch	13.0.6-1	vulnerable
	buster	18.3.6-2	vulnerable
	bullseye, sid	19.2.3-1	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
mesa	source	(unstable)	(unfixed)			944298
mesa	source	jessie	10.3.2-1+deb8u2		DLA-1993-1

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0857
https://lists.freedesktop.org/pipermail/mesa-dev/2019-October/223704.html