title: Bromium client - out of bound read results in race condition causing Kernel memory leaks or denial of service
description: Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.
problem types: CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)
affected:
{
product: Bromium client
vendor: Bromium
versions:
status: affected, version: 4.0.3.2060
status: affected, version: ?< 4.0.3.2060
status: affected, version: ?>= 4.0.3.2060
status: affected, version: < 4.1.7 Update 1
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
version: 3.0
]