CVE-2018-19523

MEDIUM 5.5CVE-2018-19523 · Published 03/01/2019 · updated 17/06/2026

In short

CVE-2018-19523 is a MEDIUM (CVSS 5.5) vulnerability affecting driveagent (driveagent).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 25.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
driveagent driveagent	`= 2.2015.7.14`	No fix yet

Description

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x80002068) with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool.

References

blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86ahttps://downwithup.github.io/CVEPosts.html · Broken Link
downwithup.github.io/CVEPosts.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free