Vulnerability-Lookup

RHSA-2020:4060

Vulnerability from csaf_redhat - Published: 2020-09-29 22:31 - Updated: 2026-06-28 08:46

Summary

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Severity

Important

Notes

Topic: An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: use-after-free in sound/core/timer.c (CVE-2019-19807) * kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c (CVE-2017-18551) * kernel: race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c leads to use-after-free (CVE-2018-20836) * kernel: out of bounds write in i2c driver leads to local escalation of privilege (CVE-2019-9454) * kernel: use after free due to race condition in the video driver leads to local privilege escalation (CVE-2019-9458) Space precludes documenting all of the security fixes in this advisory. See the descriptions of the remaining security fixes in the related Knowledge Article: https://access.redhat.com/articles/5442421 For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2017-18551

An out of bounds (OOB) memory access flaw was found in i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length (data->block[0]) greater than 'I2C_SMBUS_BLOCK_MAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker with special user privilege (or root) to crash the system or leak kernel internal information.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 174 products

Product	Version	Remediation
Unresolved product id: 7Client-7.9:bpftool-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-0:3.10.0-1160.el7.src	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-debug-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-debug-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-debuginfo-common-x86_64-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-doc-0:3.10.0-1160.el7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-tools-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:kernel-tools-libs-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:perf-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:python-perf-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-optional-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-optional-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-optional-7.9:kernel-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-optional-7.9:kernel-debuginfo-common-x86_64-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-optional-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-optional-7.9:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-optional-7.9:perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Client-optional-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:bpftool-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-0:3.10.0-1160.el7.src	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-debug-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-debug-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-debuginfo-common-x86_64-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-doc-0:3.10.0-1160.el7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-tools-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:kernel-tools-libs-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:perf-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:python-perf-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-optional-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-optional-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-optional-7.9:kernel-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-optional-7.9:kernel-debuginfo-common-x86_64-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-optional-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-optional-7.9:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-optional-7.9:perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7ComputeNode-optional-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:bpftool-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:bpftool-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:bpftool-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:bpftool-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-0:3.10.0-1160.el7.src	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-bootwrapper-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-bootwrapper-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-devel-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-devel-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debug-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debuginfo-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debuginfo-common-ppc64-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debuginfo-common-s390x-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-debuginfo-common-x86_64-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-devel-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-devel-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-devel-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-doc-0:3.10.0-1160.el7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-kdump-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-kdump-debuginfo-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-kdump-devel-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-tools-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-tools-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-tools-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-tools-libs-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-tools-libs-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:kernel-tools-libs-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:perf-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:perf-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:perf-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:perf-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:perf-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:perf-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:perf-debuginfo-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:python-perf-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:python-perf-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:python-perf-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:python-perf-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-debug-devel-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-debuginfo-common-ppc64-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-debuginfo-common-ppc64le-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-debuginfo-common-x86_64-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-tools-libs-devel-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-tools-libs-devel-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:perf-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:perf-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.ppc64	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 7Server-optional-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:bpftool-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-0:3.10.0-1160.el7.src	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-abi-whitelists-0:3.10.0-1160.el7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-debug-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-debug-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-debuginfo-common-x86_64-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-doc-0:3.10.0-1160.el7.noarch	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-tools-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:kernel-tools-libs-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:perf-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:python-perf-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-optional-7.9:bpftool-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-optional-7.9:kernel-debug-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-optional-7.9:kernel-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-optional-7.9:kernel-debuginfo-common-x86_64-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-optional-7.9:kernel-tools-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-optional-7.9:kernel-tools-libs-devel-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-optional-7.9:perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 7Workstation-optional-7.9:python-perf-debuginfo-0:3.10.0-1160.el7.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2018-20836

A flaw was found in the Linux kernel’s implementation of the SAS expander subsystem, where a race condition exists in the smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c. An attacker could abuse this flaw to corrupt memory and escalate privileges.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-366 - Race Condition within a Thread

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-9454

An out-of-bounds write flaw was found in the i2c driver in the Linux kernel. This flaw allows an attacker to escalate privileges with system execution privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-9458

A flaw was found in the Linux kernel's video driver. A race condition, leading to a use-after-free, could lead to a local privilege escalation. User interaction is not needed for exploitation.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-366 - Race Condition within a Thread

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-12614

A flaw was found in the way Linux kernel's Dynamic Logical Partitioning (DLPAR) functionality on PowerPC systems handled low memory conditions on device discovery. An attacker who can change the LPAR configuration and incur low memory conditions at the same time could use this flaw to crash the system.

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-15217

A vulnerability was found in the Linux kernel. The Zr364xx USB device driver is susceptible to malicious USB devices. An attacker able to add a specific USB device could cause a crash leading to a denial of service.

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-15807

A memory leak flaw was found in the Linux kernel. An error in the resource cleanup of the sas_ex_discover_expander function can allow an attacker to induce error conditions that could crash the system. The highest threat from this vulnerability is to system availability.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-15917

A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hci_uart_set_proto() function in drivers/bluetooth/hci_ldisc.c. The flaw in this function can cause memory corruption or a denial of service because of a use-after-free issue when the hci_uart_register_dev() fails.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-16231

A flaw was found in the Linux kernel. A NULL pointer dereference flaw was found in the FUJITSU Extended Socket Network driver. A call to the alloc_workqueue return was not validated and causes a denial of service at the time of failure. The highest threat from this vulnerability is to system availability.

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-16233

A flaw was found in the Linux kernel. A NULL pointer dereference flaw was found in the QLOGIC drivers for HBA. A call to alloc_workqueue return was not validated and can cause a denial of service. The highest threat from this vulnerability is to system availability.

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-16994

A flaw was found in the way the sit_init_net function in the Linux kernel handled resource cleanup on errors. This flaw allows an attacker to use the error conditions to crash the system.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-17053

A vulnerability was discovered in the Linux kernel's AF_IEEE802154 networking module where permissions checks are not enforced. This can allow an unprivileged user to create raw sockets for this protocol leading to the potential for data leaks or system unavailability.

4.0 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-250 - Execution with Unnecessary Privileges

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-17055

A vulnerability was found in the Linux kernel’s implementation of the AF_ISDN protocol, which does not enforce the CAP_NET_RAW capability. This flaw can allow unprivileged users to create a raw socket for this protocol. This could further allow the user to control the availability of an existing ISDN circuit.

4.0 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-250 - Execution with Unnecessary Privileges

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-18808

A flaw was found in the AMD Cryptographic Co-processor driver in the Linux kernel. An attacker, able to send invalid SHA type commands, could cause the system to crash. The highest threat from this vulnerability is to system availability.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19046

A memory leak problem was found in __ipmi_bmc_register in drivers/char/ipmi/ipmi_msghandler.c in Intelligent Platform Management Interface (IPMI) which is used for incoming and outgoing message routing purpose. This flaw may allow an attacker with minimal privilege to cause a denial of service by triggering ida_simple_get() failure.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19055

A flaw was found in the Linux kernel. The Wireless configuration API functionality mishandles resource cleanup in nl80211_get_ftm_responder_stats function. An attacker able to trigger the resource cleanup code path could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19058

A flaw was found in the Linux kernel. The Intel Wireless WiFi MVM Firmware driver mishandles resource cleanup during device coredump. An attacker able to trigger the device coredump and system-wide out of memory conditions at the same time could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-19059

A flaw was found in the way the Intel Wireless driver in the Linux kernel handled resource cleanup during Gen 3 device initialization. This flaw allows an attacker with the ability to restrict access to DMA coherent memory on device initialization, to crash the system.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-19062

A flaw was found in the Linux kernel. The crypto_report function mishandles resource cleanup on error. A local attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-19063

A flaw was found in the Linux kernel. The rtl_usb_probe function mishandles resource cleanup on error. An attacker able to induce the error conditions could use this flaw to crash the system. The highest threat from this vulnerability is to system availability.

4.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-19332

An out-of-bounds memory write issue was found in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.

6.1 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19447

A flaw was found in the Linux kernel's ext4_unlink function. An attacker could corrupt memory or escalate privileges when deleting a file from a recently unmounted specially crafted ext4 filesystem, including local, USB, and iSCSI.

7.8 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19523

A flaw was found in the Linux kernel’s implementation for ADU devices from Ontrak Control Systems, where an attacker with administrative privileges and access to a local account could pre-groom the memory and physically disconnect or unload a module. The attacker must be able to access either of these two events to trigger the use-after-free, and then race the access to the use-after-free, to create a situation where key USB structs can be manipulated into corrupting memory.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19524

A use-after-free flaw was found in the Linux kernel’s input device driver functionality when unplugging a device. A user with physical access could use this flaw to crash the system.

4.6 (Medium)


                
                  CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19530

A use-after-free flaw was found in the acm_probe USB subsystem in the Linux kernel. A race condition occurs when a destroy() procedure is initiated allowing the refcount to decrement on the interface so early that it is never under counted. A malicious USB device is required for exploit. System availability is the largest threat from the vulnerability, however data integrity and confidentiality are also threatened.

5.7 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

CWE-416 - Use After Free

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19534

An information-leak flaw was found in the Linux kernel's pcan USB driver. When a device using this driver connects to the system, the stack information is leaked to the CAN bus, a controller area network for automobiles. The highest threat with this vulnerability is breach of data confidentiality.

4.6 (Medium)


                
                  CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-497 - Exposure of Sensitive System Information to an Unauthorized Control Sphere

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19537

A flaw was found in the Linux kernel, where there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer. An attacker who can hotplug at least two devices of this class can cause a use-after-free situation.

4.2 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19767

A use-after-free flaw was found in the Linux kernel’s ext4 file system functionality when the user mount ext4 partition, with the usage of an additional debug parameter is defining an extra inode size. If this parameter has a non zero value, this flaw allows a local user to crash the system when inode expansion happens.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2019-19807

A memory flaw was found in the ALSA subsystem of the Linux kernel. The struct snd_timer_instance function fails the timer->max_instances check leading to an invalid address. This could lead to a use-after-free vulnerability.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Important

CVE-2019-20054

A flaw was found in the Linux kernel’s implementation of dropping sysctl entries. A local attacker who has access to load modules on the system can trigger a condition during module load failure and panic the system.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-20095

A flaw was found in the Linux kernel's mwifiex driver implementation when connecting to other WiFi devices in "Test Mode." A kernel memory leak can occur if an error condition is met during the parameter negotiation. This issue can lead to a denial of service if multiple error conditions meeting the repeated connection attempts are attempted.

5.2 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2019-20636

An out-of-bounds write flaw was found in the Linux kernel. A crafted keycode table could be used by drivers/input/input.c to perform the out-of-bounds write. A local user with root access can insert garbage to this keycode table that can lead to out-of-bounds memory access. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-1749

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-319 - Cleartext Transmission of Sensitive Information

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-2732

A flaw was found in the way KVM hypervisor handled instruction emulation for the L2 guest when nested(=1) virtualization is enabled. In the instruction emulation, the L2 guest could trick the L0 hypervisor into accessing sensitive bits of the L1 hypervisor. An L2 guest could use this flaw to potentially access information of the L1 hypervisor.

5.8 (Medium)


                
                  CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-8647

A flaw was found in the Linux kernel’s virtual console resize functionality. An attacker with local access to virtual consoles can use the virtual console resizing code to gather kernel internal data structures.

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-8649

A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console. An out-of-bounds read can occur, leaking information to the console.

5.9 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-9383

An out-of-bounds (OOB) memory access flaw was found in the floppy driver module in the Linux kernel. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-10690

There is a use-after-free problem seen due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp device file (like /dev/ptpX) and voluntarily goes to sleep. During this time if the underlying device is removed, it can cause an exploitable condition as the process wakes up to terminate and clean all attached files. The system crashes due to the cdev structure being invalid (as already freed) which is pointed to by the inode.

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2020-10732

A flaw was found in the Linux kernel’s implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-908 - Use of Uninitialized Resource

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-10742

A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality and system availability.

6.0 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-10751

A flaw was found in the Linux kernel’s SELinux LSM hook implementation, where it anticipated the skb would only contain a single Netlink message. The hook incorrectly validated the first Netlink message in the skb only, to allow or deny the rest of the messages within the skb with the granted permissions and without further processing. At this time, there is no known ability for an attacker to abuse this flaw.

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CWE-349 - Acceptance of Extraneous Untrusted Data With Trusted Data

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-10942

A stack buffer overflow issue was found in the get_raw_socket() routine of the Host kernel accelerator for virtio net (vhost-net) driver. It could occur while doing an ictol(VHOST_NET_SET_BACKEND) call, and retrieving socket name in a kernel stack variable via get_raw_socket(). A user able to perform ioctl(2) calls on the '/dev/vhost-net' device may use this flaw to crash the kernel resulting in DoS issue.

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Low

CVE-2020-11565

An out-of-bounds write flaw was found in the Linux kernel. An empty nodelist in mempolicy.c is mishandled durig mount option parsing leading to a stack-based out-of-bounds write. The highest threat from this vulnerability is to system availability.

6.0 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-12770

A vulnerability was found in sg_write in drivers/scsi/sg.c in the SCSI generic (sg) driver subsystem. This flaw allows an attacker with local access and special user or root privileges to cause a denial of service if the allocated list is not cleaned with an invalid (Sg_fd * sfp) pointer at the time of failure, also possibly causing a kernel internal information leak problem.

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-824 - Access of Uninitialized Pointer

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-12826

A flaw was found in the Linux kernel loose validation of child/parent process identification handling while filtering signal handlers. A local attacker is able to abuse this flaw to bypass checks to send any signal to a privileged process.

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

CVE-2020-14305

An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 174 products, the same list as for CVE-2017-18551

Threats

Impact Moderate

References

262 references

URL	Category
https://access.redhat.com/errata/RHSA-2020:4060	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://access.redhat.com/articles/5442421	external
https://bugzilla.redhat.com/show_bug.cgi?id=1448750	external
https://bugzilla.redhat.com/show_bug.cgi?id=1699402	external
https://bugzilla.redhat.com/show_bug.cgi?id=1707796	external
https://bugzilla.redhat.com/show_bug.cgi?id=1718176	external
https://bugzilla.redhat.com/show_bug.cgi?id=1724345	external
https://bugzilla.redhat.com/show_bug.cgi?id=1745528	external
https://bugzilla.redhat.com/show_bug.cgi?id=1747216	external
https://bugzilla.redhat.com/show_bug.cgi?id=1757368	external
https://bugzilla.redhat.com/show_bug.cgi?id=1758242	external
https://bugzilla.redhat.com/show_bug.cgi?id=1758248	external
https://bugzilla.redhat.com/show_bug.cgi?id=1759681	external
https://bugzilla.redhat.com/show_bug.cgi?id=1760100	external
https://bugzilla.redhat.com/show_bug.cgi?id=1760310	external
https://bugzilla.redhat.com/show_bug.cgi?id=1760420	external
https://bugzilla.redhat.com/show_bug.cgi?id=1774988	external
https://bugzilla.redhat.com/show_bug.cgi?id=1775015	external
https://bugzilla.redhat.com/show_bug.cgi?id=1775021	external
https://bugzilla.redhat.com/show_bug.cgi?id=1775042	external
https://bugzilla.redhat.com/show_bug.cgi?id=1775047	external
https://bugzilla.redhat.com/show_bug.cgi?id=1775074	external
https://bugzilla.redhat.com/show_bug.cgi?id=1777239	external
https://bugzilla.redhat.com/show_bug.cgi?id=1777418	external
https://bugzilla.redhat.com/show_bug.cgi?id=1779594	external
https://bugzilla.redhat.com/show_bug.cgi?id=1781679	external
https://bugzilla.redhat.com/show_bug.cgi?id=1783434	external
https://bugzilla.redhat.com/show_bug.cgi?id=1783459	external
https://bugzilla.redhat.com/show_bug.cgi?id=1783518	external
https://bugzilla.redhat.com/show_bug.cgi?id=1783540	external
https://bugzilla.redhat.com/show_bug.cgi?id=1783554	external
https://bugzilla.redhat.com/show_bug.cgi?id=1783561	external
https://bugzilla.redhat.com/show_bug.cgi?id=1786078	external
https://bugzilla.redhat.com/show_bug.cgi?id=1786160	external
https://bugzilla.redhat.com/show_bug.cgi?id=1790063	external
https://bugzilla.redhat.com/show_bug.cgi?id=1791954	external
https://bugzilla.redhat.com/show_bug.cgi?id=1802555	external
https://bugzilla.redhat.com/show_bug.cgi?id=1802563	external
https://bugzilla.redhat.com/show_bug.cgi?id=1805135	external
https://bugzilla.redhat.com/show_bug.cgi?id=1809833	external
https://bugzilla.redhat.com/show_bug.cgi?id=1810685	external
https://bugzilla.redhat.com/show_bug.cgi?id=1817141	external
https://bugzilla.redhat.com/show_bug.cgi?id=1817718	external
https://bugzilla.redhat.com/show_bug.cgi?id=1818818	external
https://bugzilla.redhat.com/show_bug.cgi?id=1819377	external
https://bugzilla.redhat.com/show_bug.cgi?id=1822077	external
https://bugzilla.redhat.com/show_bug.cgi?id=1824059	external
https://bugzilla.redhat.com/show_bug.cgi?id=1824270	external
https://bugzilla.redhat.com/show_bug.cgi?id=1824918	external
https://bugzilla.redhat.com/show_bug.cgi?id=1829662	external
https://bugzilla.redhat.com/show_bug.cgi?id=1831399	external
https://bugzilla.redhat.com/show_bug.cgi?id=1832332	external
https://bugzilla.redhat.com/show_bug.cgi?id=1834845	external
https://bugzilla.redhat.com/show_bug.cgi?id=1835127	external
https://bugzilla.redhat.com/show_bug.cgi?id=1839634	external
https://bugzilla.redhat.com/show_bug.cgi?id=1845326	external
https://bugzilla.redhat.com/show_bug.cgi?id=1850716	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2017-18551	self
https://bugzilla.redhat.com/show_bug.cgi?id=1757368	external
https://www.cve.org/CVERecord?id=CVE-2017-18551	external
https://nvd.nist.gov/vuln/detail/CVE-2017-18551	external
https://access.redhat.com/security/cve/CVE-2018-20836	self
https://bugzilla.redhat.com/show_bug.cgi?id=1707796	external
https://www.cve.org/CVERecord?id=CVE-2018-20836	external
https://nvd.nist.gov/vuln/detail/CVE-2018-20836	external
https://access.redhat.com/security/cve/CVE-2019-9454	self
https://bugzilla.redhat.com/show_bug.cgi?id=1818818	external
https://www.cve.org/CVERecord?id=CVE-2019-9454	external
https://nvd.nist.gov/vuln/detail/CVE-2019-9454	external
https://access.redhat.com/security/cve/CVE-2019-9458	self
https://bugzilla.redhat.com/show_bug.cgi?id=1819377	external
https://www.cve.org/CVERecord?id=CVE-2019-9458	external
https://nvd.nist.gov/vuln/detail/CVE-2019-9458	external
https://access.redhat.com/security/cve/CVE-2019-12614	self
https://bugzilla.redhat.com/show_bug.cgi?id=1718176	external
https://www.cve.org/CVERecord?id=CVE-2019-12614	external
https://nvd.nist.gov/vuln/detail/CVE-2019-12614	external
https://access.redhat.com/security/cve/CVE-2019-15217	self
https://bugzilla.redhat.com/show_bug.cgi?id=1745528	external
https://www.cve.org/CVERecord?id=CVE-2019-15217	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15217	external
https://access.redhat.com/security/cve/CVE-2019-15807	self
https://bugzilla.redhat.com/show_bug.cgi?id=1747216	external
https://www.cve.org/CVERecord?id=CVE-2019-15807	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15807	external
https://access.redhat.com/security/cve/CVE-2019-15917	self
https://bugzilla.redhat.com/show_bug.cgi?id=1760100	external
https://www.cve.org/CVERecord?id=CVE-2019-15917	external
https://nvd.nist.gov/vuln/detail/CVE-2019-15917	external
https://access.redhat.com/security/cve/CVE-2019-16231	self
https://bugzilla.redhat.com/show_bug.cgi?id=1760310	external
https://www.cve.org/CVERecord?id=CVE-2019-16231	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16231	external
https://lkml.org/lkml/2019/9/9/487	external
https://security.netapp.com/advisory/ntap-2019100…	external
https://access.redhat.com/security/cve/CVE-2019-16233	self
https://bugzilla.redhat.com/show_bug.cgi?id=1760420	external
https://www.cve.org/CVERecord?id=CVE-2019-16233	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16233	external
https://access.redhat.com/security/cve/CVE-2019-16994	self
https://bugzilla.redhat.com/show_bug.cgi?id=1759681	external
https://www.cve.org/CVERecord?id=CVE-2019-16994	external
https://nvd.nist.gov/vuln/detail/CVE-2019-16994	external
https://access.redhat.com/security/cve/CVE-2019-17053	self
https://bugzilla.redhat.com/show_bug.cgi?id=1758242	external
https://www.cve.org/CVERecord?id=CVE-2019-17053	external
https://nvd.nist.gov/vuln/detail/CVE-2019-17053	external
https://access.redhat.com/security/cve/CVE-2019-17055	self
https://bugzilla.redhat.com/show_bug.cgi?id=1758248	external
https://www.cve.org/CVERecord?id=CVE-2019-17055	external
https://nvd.nist.gov/vuln/detail/CVE-2019-17055	external
https://access.redhat.com/security/cve/CVE-2019-18808	self
https://bugzilla.redhat.com/show_bug.cgi?id=1777418	external
https://www.cve.org/CVERecord?id=CVE-2019-18808	external
https://nvd.nist.gov/vuln/detail/CVE-2019-18808	external
https://access.redhat.com/security/cve/CVE-2019-19046	self
https://bugzilla.redhat.com/show_bug.cgi?id=1774988	external
https://www.cve.org/CVERecord?id=CVE-2019-19046	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19046	external
https://access.redhat.com/security/cve/CVE-2019-19055	self
https://bugzilla.redhat.com/show_bug.cgi?id=1775074	external
https://www.cve.org/CVERecord?id=CVE-2019-19055	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19055	external
https://access.redhat.com/security/cve/CVE-2019-19058	self
https://bugzilla.redhat.com/show_bug.cgi?id=1775047	external
https://www.cve.org/CVERecord?id=CVE-2019-19058	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19058	external
https://access.redhat.com/security/cve/CVE-2019-19059	self
https://bugzilla.redhat.com/show_bug.cgi?id=1775042	external
https://www.cve.org/CVERecord?id=CVE-2019-19059	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19059	external
https://access.redhat.com/security/cve/CVE-2019-19062	self
https://bugzilla.redhat.com/show_bug.cgi?id=1775021	external
https://www.cve.org/CVERecord?id=CVE-2019-19062	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19062	external
https://access.redhat.com/security/cve/CVE-2019-19063	self
https://bugzilla.redhat.com/show_bug.cgi?id=1775015	external
https://www.cve.org/CVERecord?id=CVE-2019-19063	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19063	external
https://access.redhat.com/security/cve/CVE-2019-19332	self
https://bugzilla.redhat.com/show_bug.cgi?id=1779594	external
https://www.cve.org/CVERecord?id=CVE-2019-19332	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19332	external
https://lore.kernel.org/kvm/000000000000ea5ec2059…	external
https://www.openwall.com/lists/oss-security/2019/…	external
https://access.redhat.com/security/cve/CVE-2019-19447	self
https://bugzilla.redhat.com/show_bug.cgi?id=1781679	external
https://www.cve.org/CVERecord?id=CVE-2019-19447	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19447	external
https://bugzilla.kernel.org/show_bug.cgi?id=205433	external
https://github.com/bobfuzzer/CVE/tree/master/CVE-…	external
https://access.redhat.com/security/cve/CVE-2019-19523	self
https://bugzilla.redhat.com/show_bug.cgi?id=1783434	external
https://www.cve.org/CVERecord?id=CVE-2019-19523	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19523	external
https://access.redhat.com/security/cve/CVE-2019-19524	self
https://bugzilla.redhat.com/show_bug.cgi?id=1783459	external
https://www.cve.org/CVERecord?id=CVE-2019-19524	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19524	external
https://access.redhat.com/security/cve/CVE-2019-19530	self
https://bugzilla.redhat.com/show_bug.cgi?id=1783518	external
https://www.cve.org/CVERecord?id=CVE-2019-19530	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19530	external
http://seclists.org/oss-sec/2019/q4/115	external
http://www.openwall.com/lists/oss-security/2019/12/03/4	external
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://access.redhat.com/security/cve/CVE-2019-19534	self
https://bugzilla.redhat.com/show_bug.cgi?id=1783540	external
https://www.cve.org/CVERecord?id=CVE-2019-19534	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19534	external
https://access.redhat.com/security/cve/CVE-2019-19537	self
https://bugzilla.redhat.com/show_bug.cgi?id=1783561	external
https://www.cve.org/CVERecord?id=CVE-2019-19537	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19537	external
https://access.redhat.com/security/cve/CVE-2019-19767	self
https://bugzilla.redhat.com/show_bug.cgi?id=1786160	external
https://www.cve.org/CVERecord?id=CVE-2019-19767	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19767	external
https://access.redhat.com/security/cve/CVE-2019-19807	self
https://bugzilla.redhat.com/show_bug.cgi?id=1786078	external
https://www.cve.org/CVERecord?id=CVE-2019-19807	external
https://nvd.nist.gov/vuln/detail/CVE-2019-19807	external
https://access.redhat.com/security/cve/CVE-2019-20054	self
https://bugzilla.redhat.com/show_bug.cgi?id=1790063	external
https://www.cve.org/CVERecord?id=CVE-2019-20054	external
https://nvd.nist.gov/vuln/detail/CVE-2019-20054	external
https://access.redhat.com/security/cve/CVE-2019-20095	self
https://bugzilla.redhat.com/show_bug.cgi?id=1791954	external
https://www.cve.org/CVERecord?id=CVE-2019-20095	external
https://nvd.nist.gov/vuln/detail/CVE-2019-20095	external
https://access.redhat.com/security/cve/CVE-2019-20636	self
https://bugzilla.redhat.com/show_bug.cgi?id=1824059	external
https://www.cve.org/CVERecord?id=CVE-2019-20636	external
https://nvd.nist.gov/vuln/detail/CVE-2019-20636	external
https://access.redhat.com/security/cve/CVE-2020-1749	self
https://bugzilla.redhat.com/show_bug.cgi?id=1809833	external
https://www.cve.org/CVERecord?id=CVE-2020-1749	external
https://nvd.nist.gov/vuln/detail/CVE-2020-1749	external
https://access.redhat.com/security/cve/CVE-2020-2732	self
https://bugzilla.redhat.com/show_bug.cgi?id=1805135	external
https://www.cve.org/CVERecord?id=CVE-2020-2732	external
https://nvd.nist.gov/vuln/detail/CVE-2020-2732	external
https://access.redhat.com/security/cve/CVE-2020-8647	self
https://bugzilla.redhat.com/show_bug.cgi?id=1802563	external
https://www.cve.org/CVERecord?id=CVE-2020-8647	external
https://nvd.nist.gov/vuln/detail/CVE-2020-8647	external
https://access.redhat.com/security/cve/CVE-2020-8649	self
https://bugzilla.redhat.com/show_bug.cgi?id=1802555	external
https://www.cve.org/CVERecord?id=CVE-2020-8649	external
https://nvd.nist.gov/vuln/detail/CVE-2020-8649	external
https://access.redhat.com/security/cve/CVE-2020-9383	self
https://bugzilla.redhat.com/show_bug.cgi?id=1810685	external
https://www.cve.org/CVERecord?id=CVE-2020-9383	external
https://nvd.nist.gov/vuln/detail/CVE-2020-9383	external
https://access.redhat.com/security/cve/CVE-2020-10690	self
https://bugzilla.redhat.com/show_bug.cgi?id=1817141	external
https://www.cve.org/CVERecord?id=CVE-2020-10690	external
https://nvd.nist.gov/vuln/detail/CVE-2020-10690	external
https://access.redhat.com/security/cve/CVE-2020-10732	self
https://bugzilla.redhat.com/show_bug.cgi?id=1831399	external
https://www.cve.org/CVERecord?id=CVE-2020-10732	external
https://nvd.nist.gov/vuln/detail/CVE-2020-10732	external
https://access.redhat.com/security/cve/CVE-2020-10742	self
https://bugzilla.redhat.com/show_bug.cgi?id=1835127	external
https://www.cve.org/CVERecord?id=CVE-2020-10742	external
https://nvd.nist.gov/vuln/detail/CVE-2020-10742	external
https://access.redhat.com/security/cve/CVE-2020-10751	self
https://bugzilla.redhat.com/show_bug.cgi?id=1839634	external
https://www.cve.org/CVERecord?id=CVE-2020-10751	external
https://nvd.nist.gov/vuln/detail/CVE-2020-10751	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://lore.kernel.org/selinux/CACT4Y+b8HiV6KFuA…	external
https://www.openwall.com/lists/oss-security/2020/…	external
https://access.redhat.com/security/cve/CVE-2020-10942	self
https://bugzilla.redhat.com/show_bug.cgi?id=1817718	external
https://www.cve.org/CVERecord?id=CVE-2020-10942	external
https://nvd.nist.gov/vuln/detail/CVE-2020-10942	external
https://access.redhat.com/security/cve/CVE-2020-11565	self
https://bugzilla.redhat.com/show_bug.cgi?id=1824918	external
https://www.cve.org/CVERecord?id=CVE-2020-11565	external
https://nvd.nist.gov/vuln/detail/CVE-2020-11565	external
https://access.redhat.com/security/cve/CVE-2020-12770	self
https://bugzilla.redhat.com/show_bug.cgi?id=1834845	external
https://www.cve.org/CVERecord?id=CVE-2020-12770	external
https://nvd.nist.gov/vuln/detail/CVE-2020-12770	external
https://access.redhat.com/security/cve/CVE-2020-12826	self
https://bugzilla.redhat.com/show_bug.cgi?id=1822077	external
https://www.cve.org/CVERecord?id=CVE-2020-12826	external
https://nvd.nist.gov/vuln/detail/CVE-2020-12826	external
https://git.kernel.org/pub/scm/linux/kernel/git/t…	external
https://lists.openwall.net/linux-kernel/2020/03/24/1803	external
https://www.openwall.com/lists/kernel-hardening/2…	external
https://access.redhat.com/security/cve/CVE-2020-14305	self
https://bugzilla.redhat.com/show_bug.cgi?id=1850716	external
https://www.cve.org/CVERecord?id=CVE-2020-14305	external
https://nvd.nist.gov/vuln/detail/CVE-2020-14305	external
https://bugs.openvz.org/browse/OVZ-7188	external
https://patchwork.ozlabs.org/project/netfilter-de…	external

Acknowledgments

Red Hat QE Engineering Xiumei Mu

Red Hat Paolo Bonzini

Red Hat Jay Shin

Adam Zabrocki

Virtuozzo Vasily Averin

JSON

To clipboard

Loading 2.4 MB of JSON…

CVE-2019-17055 (GCVE-0-2019-17055)

Vulnerability from cvelistv5 – Published: 2019-10-01 13:10 – Updated: 2024-08-05 01:33

Summary

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://git.kernel.org/pub/scm/linux/kernel/git/t…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://seclists.org/bugtraq/2019/Nov/11	mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/155212/Slack…	x_refsource_MISC
https://usn.ubuntu.com/4185-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4184-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4186-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4185-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4186-2/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2020:0790	vendor-advisoryx_refsource_REDHAT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:33:16.286Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80"
          },
          {
            "name": "FEDORA-2019-41e28660ae",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/"
          },
          {
            "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2019/Nov/11"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "name": "USN-4185-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4185-1/"
          },
          {
            "name": "USN-4184-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4184-1/"
          },
          {
            "name": "USN-4186-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4186-1/"
          },
          {
            "name": "openSUSE-SU-2019:2503",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
          },
          {
            "name": "openSUSE-SU-2019:2507",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
          },
          {
            "name": "USN-4185-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4185-2/"
          },
          {
            "name": "USN-4186-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4186-2/"
          },
          {
            "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          },
          {
            "name": "RHSA-2020:0790",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0790"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-11T19:06:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80"
        },
        {
          "name": "FEDORA-2019-41e28660ae",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/"
        },
        {
          "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2019/Nov/11"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        },
        {
          "name": "USN-4185-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4185-1/"
        },
        {
          "name": "USN-4184-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4184-1/"
        },
        {
          "name": "USN-4186-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4186-1/"
        },
        {
          "name": "openSUSE-SU-2019:2503",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
        },
        {
          "name": "openSUSE-SU-2019:2507",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
        },
        {
          "name": "USN-4185-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4185-2/"
        },
        {
          "name": "USN-4186-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4186-2/"
        },
        {
          "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        },
        {
          "name": "RHSA-2020:0790",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0790"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-17055",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b"
            },
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80",
              "refsource": "MISC",
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80"
            },
            {
              "name": "FEDORA-2019-41e28660ae",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/"
            },
            {
              "name": "20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2019/Nov/11"
            },
            {
              "name": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
            },
            {
              "name": "USN-4185-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4185-1/"
            },
            {
              "name": "USN-4184-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4184-1/"
            },
            {
              "name": "USN-4186-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4186-1/"
            },
            {
              "name": "openSUSE-SU-2019:2503",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html"
            },
            {
              "name": "openSUSE-SU-2019:2507",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html"
            },
            {
              "name": "USN-4185-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4185-2/"
            },
            {
              "name": "USN-4186-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4186-2/"
            },
            {
              "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
            },
            {
              "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
            },
            {
              "name": "RHSA-2020:0790",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0790"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-17055",
    "datePublished": "2019-10-01T13:10:41.000Z",
    "dateReserved": "2019-10-01T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:33:16.286Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-18808 (GCVE-0-2019-18808)

Vulnerability from cvelistv5 – Published: 2019-11-07 15:29 – Updated: 2024-08-05 02:02

Summary

A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://github.com/torvalds/linux/commit/128c6642…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2019120…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4526-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4525-1/	vendor-advisoryx_refsource_UBUNTU
http://www.openwall.com/lists/oss-security/2021/09/14/1	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:02:39.733Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "name": "FEDORA-2019-b86a7bdba0",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/"
          },
          {
            "name": "FEDORA-2019-124a241044",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/"
          },
          {
            "name": "openSUSE-SU-2020:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
          },
          {
            "name": "USN-4526-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4526-1/"
          },
          {
            "name": "USN-4525-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4525-1/"
          },
          {
            "name": "[oss-security] 20210914 Disclosure: CVE-2021-3744: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/09/14/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-14T17:06:13.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
        },
        {
          "name": "FEDORA-2019-b86a7bdba0",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/"
        },
        {
          "name": "FEDORA-2019-124a241044",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/"
        },
        {
          "name": "openSUSE-SU-2020:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
        },
        {
          "name": "USN-4526-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4526-1/"
        },
        {
          "name": "USN-4525-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4525-1/"
        },
        {
          "name": "[oss-security] 20210914 Disclosure: CVE-2021-3744: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/09/14/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-18808",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "FEDORA-2019-b86a7bdba0",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/"
            },
            {
              "name": "FEDORA-2019-124a241044",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/"
            },
            {
              "name": "openSUSE-SU-2020:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
            },
            {
              "name": "USN-4526-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4526-1/"
            },
            {
              "name": "USN-4525-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4525-1/"
            },
            {
              "name": "[oss-security] 20210914 Disclosure: CVE-2021-3744: crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/09/14/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-18808",
    "datePublished": "2019-11-07T15:29:46.000Z",
    "dateReserved": "2019-11-07T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:02:39.733Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19046 (GCVE-0-2019-19046)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:23 – Updated: 2024-08-05 02:09 Disputed

Summary

A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://github.com/torvalds/linux/commit/4aa7afb0…	x_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=1157304	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4302-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4325-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4319-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:38.134Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157304"
          },
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "name": "openSUSE-SU-2019:2675",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
          },
          {
            "name": "USN-4302-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4302-1/"
          },
          {
            "name": "USN-4325-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4325-1/"
          },
          {
            "name": "USN-4319-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4319-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-22T18:06:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157304"
        },
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "name": "openSUSE-SU-2019:2675",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
        },
        {
          "name": "USN-4302-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4302-1/"
        },
        {
          "name": "USN-4325-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4325-1/"
        },
        {
          "name": "USN-4319-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4319-1/"
        }
      ],
      "tags": [
        "disputed"
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19046",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "** DISPUTED ** A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/4aa7afb0ee20a97fbf0c5bab3df028d5fb85fdab"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1157304",
              "refsource": "MISC",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157304"
            },
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "openSUSE-SU-2019:2675",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
            },
            {
              "name": "USN-4302-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4302-1/"
            },
            {
              "name": "USN-4325-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4325-1/"
            },
            {
              "name": "USN-4319-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4319-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19046",
    "datePublished": "2019-11-18T05:23:42.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:38.134Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19055 (GCVE-0-2019-19055)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:23 – Updated: 2024-08-05 02:09 Disputed

Summary

A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
https://github.com/torvalds/linux/commit/1399c59f…	x_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=1157319	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://usn.ubuntu.com/4226-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4225-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4225-2/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:38.548Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/1399c59fa92984836db90538cf92397fe7caaa57"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157319"
          },
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "name": "USN-4226-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4226-1/"
          },
          {
            "name": "USN-4225-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4225-1/"
          },
          {
            "name": "USN-4225-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4225-2/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-23T17:06:06.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/1399c59fa92984836db90538cf92397fe7caaa57"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157319"
        },
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "name": "USN-4226-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4226-1/"
        },
        {
          "name": "USN-4225-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4225-1/"
        },
        {
          "name": "USN-4225-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4225-2/"
        }
      ],
      "tags": [
        "disputed"
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19055",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "** DISPUTED ** A memory leak in the nl80211_get_ftm_responder_stats() function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering nl80211hdr_put() failures, aka CID-1399c59fa929. NOTE: third parties dispute the relevance of this because it occurs on a code path where a successful allocation has already occurred."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/1399c59fa92984836db90538cf92397fe7caaa57",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/1399c59fa92984836db90538cf92397fe7caaa57"
            },
            {
              "name": "https://bugzilla.suse.com/show_bug.cgi?id=1157319",
              "refsource": "MISC",
              "url": "https://bugzilla.suse.com/show_bug.cgi?id=1157319"
            },
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "USN-4226-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4226-1/"
            },
            {
              "name": "USN-4225-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4225-1/"
            },
            {
              "name": "USN-4225-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4225-2/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19055",
    "datePublished": "2019-11-18T05:23:54.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:38.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19058 (GCVE-0-2019-19058)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:23 – Updated: 2024-08-05 02:09

Summary

A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

8 references

URL	Tags
https://github.com/torvalds/linux/commit/b4b814fe…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.netapp.com/advisory/ntap-2019120…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4300-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4301-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4302-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:38.134Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/b4b814fec1a5a849383f7b3886b654a13abbda7d"
          },
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "name": "openSUSE-SU-2019:2675",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
          },
          {
            "name": "USN-4300-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4300-1/"
          },
          {
            "name": "USN-4301-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4301-1/"
          },
          {
            "name": "USN-4302-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4302-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-04T14:06:03.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/b4b814fec1a5a849383f7b3886b654a13abbda7d"
        },
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
        },
        {
          "name": "openSUSE-SU-2019:2675",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
        },
        {
          "name": "USN-4300-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4300-1/"
        },
        {
          "name": "USN-4301-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4301-1/"
        },
        {
          "name": "USN-4302-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4302-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19058",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A memory leak in the alloc_sgtable() function in drivers/net/wireless/intel/iwlwifi/fw/dbg.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering alloc_page() failures, aka CID-b4b814fec1a5."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/b4b814fec1a5a849383f7b3886b654a13abbda7d",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/b4b814fec1a5a849383f7b3886b654a13abbda7d"
            },
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "openSUSE-SU-2019:2675",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
            },
            {
              "name": "USN-4300-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4300-1/"
            },
            {
              "name": "USN-4301-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4301-1/"
            },
            {
              "name": "USN-4302-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4302-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19058",
    "datePublished": "2019-11-18T05:23:58.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:38.134Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19059 (GCVE-0-2019-19059)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:24 – Updated: 2024-08-05 02:09

Summary

Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://github.com/torvalds/linux/commit/0f4f1994…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.netapp.com/advisory/ntap-2019120…	x_refsource_CONFIRM
https://usn.ubuntu.com/4300-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4301-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:38.525Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f"
          },
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "name": "USN-4300-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4300-1/"
          },
          {
            "name": "USN-4301-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4301-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-02T23:06:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f"
        },
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
        },
        {
          "name": "USN-4300-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4300-1/"
        },
        {
          "name": "USN-4301-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4301-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19059",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering iwl_pcie_init_fw_sec() or dma_alloc_coherent() failures, aka CID-0f4f199443fa."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/0f4f199443faca715523b0659aa536251d8b978f"
            },
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "USN-4300-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4300-1/"
            },
            {
              "name": "USN-4301-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4301-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19059",
    "datePublished": "2019-11-18T05:24:00.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:38.525Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19062 (GCVE-0-2019-19062)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:24 – Updated: 2024-08-05 02:09

Summary

A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

15 references

URL	Tags
https://github.com/torvalds/linux/commit/ffdde593…	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://security.netapp.com/advisory/ntap-2019120…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2020/Jan/10	mailing-listx_refsource_BUGTRAQ
http://packetstormsecurity.com/files/155890/Slack…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4254-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4254-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4258-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-2/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4284-1/	vendor-advisoryx_refsource_UBUNTU

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:38.532Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/ffdde5932042600c6807d46c1550b28b0db6a3bc"
          },
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "name": "openSUSE-SU-2019:2675",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
          },
          {
            "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Jan/10"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
          },
          {
            "name": "USN-4254-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-1/"
          },
          {
            "name": "USN-4254-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-2/"
          },
          {
            "name": "USN-4258-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4258-1/"
          },
          {
            "name": "USN-4287-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-1/"
          },
          {
            "name": "USN-4287-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-2/"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          },
          {
            "name": "USN-4284-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4284-1/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-02T20:06:23.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/ffdde5932042600c6807d46c1550b28b0db6a3bc"
        },
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
        },
        {
          "name": "openSUSE-SU-2019:2675",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
        },
        {
          "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Jan/10"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        },
        {
          "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
        },
        {
          "name": "USN-4254-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-1/"
        },
        {
          "name": "USN-4254-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-2/"
        },
        {
          "name": "USN-4258-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4258-1/"
        },
        {
          "name": "USN-4287-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-1/"
        },
        {
          "name": "USN-4287-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-2/"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        },
        {
          "name": "USN-4284-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4284-1/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19062",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_report_alg() failures, aka CID-ffdde5932042."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/torvalds/linux/commit/ffdde5932042600c6807d46c1550b28b0db6a3bc",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/ffdde5932042600c6807d46c1550b28b0db6a3bc"
            },
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "openSUSE-SU-2019:2675",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
            },
            {
              "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Jan/10"
            },
            {
              "name": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
            },
            {
              "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
            },
            {
              "name": "USN-4254-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4254-1/"
            },
            {
              "name": "USN-4254-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4254-2/"
            },
            {
              "name": "USN-4258-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4258-1/"
            },
            {
              "name": "USN-4287-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-1/"
            },
            {
              "name": "USN-4287-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-2/"
            },
            {
              "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
            },
            {
              "name": "USN-4284-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4284-1/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19062",
    "datePublished": "2019-11-18T05:24:04.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:38.532Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19063 (GCVE-0-2019-19063)

Vulnerability from cvelistv5 – Published: 2019-11-18 05:24 – Updated: 2024-08-05 02:09

Summary

Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

14 references

URL	Tags
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://seclists.org/bugtraq/2020/Jan/10	mailing-listx_refsource_BUGTRAQ
https://usn.ubuntu.com/4254-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4254-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4285-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4284-1/	vendor-advisoryx_refsource_UBUNTU
https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2019120…	x_refsource_CONFIRM
https://github.com/torvalds/linux/commit/3f936169…	x_refsource_MISC
http://packetstormsecurity.com/files/155890/Slack…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:09:39.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2019-021c968423",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
          },
          {
            "name": "FEDORA-2019-34a75d7e61",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
          },
          {
            "name": "openSUSE-SU-2019:2675",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
          },
          {
            "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "https://seclists.org/bugtraq/2020/Jan/10"
          },
          {
            "name": "USN-4254-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-1/"
          },
          {
            "name": "USN-4254-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-2/"
          },
          {
            "name": "USN-4285-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4285-1/"
          },
          {
            "name": "USN-4287-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-1/"
          },
          {
            "name": "USN-4287-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-2/"
          },
          {
            "name": "USN-4284-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4284-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/3f93616951138a598d930dcaec40f2bfd9ce43bb"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-14T17:20:10.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "FEDORA-2019-021c968423",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
        },
        {
          "name": "FEDORA-2019-34a75d7e61",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
        },
        {
          "name": "openSUSE-SU-2019:2675",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
        },
        {
          "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "https://seclists.org/bugtraq/2020/Jan/10"
        },
        {
          "name": "USN-4254-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-1/"
        },
        {
          "name": "USN-4254-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-2/"
        },
        {
          "name": "USN-4285-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4285-1/"
        },
        {
          "name": "USN-4287-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-1/"
        },
        {
          "name": "USN-4287-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-2/"
        },
        {
          "name": "USN-4284-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4284-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/3f93616951138a598d930dcaec40f2bfd9ce43bb"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19063",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2019-021c968423",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/"
            },
            {
              "name": "FEDORA-2019-34a75d7e61",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/"
            },
            {
              "name": "openSUSE-SU-2019:2675",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
            },
            {
              "name": "20200109 [slackware-security] Slackware 14.2 kernel (SSA:2020-008-01)",
              "refsource": "BUGTRAQ",
              "url": "https://seclists.org/bugtraq/2020/Jan/10"
            },
            {
              "name": "USN-4254-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4254-1/"
            },
            {
              "name": "USN-4254-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4254-2/"
            },
            {
              "name": "USN-4285-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4285-1/"
            },
            {
              "name": "USN-4287-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-1/"
            },
            {
              "name": "USN-4287-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4287-2/"
            },
            {
              "name": "USN-4284-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4284-1/"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuApr2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20191205-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20191205-0001/"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/3f93616951138a598d930dcaec40f2bfd9ce43bb",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/3f93616951138a598d930dcaec40f2bfd9ce43bb"
            },
            {
              "name": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19063",
    "datePublished": "2019-11-18T05:24:05.000Z",
    "dateReserved": "2019-11-18T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:09:39.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19332 (GCVE-0-2019-19332)

Vulnerability from cvelistv5 – Published: 2020-01-09 14:41 – Updated: 2024-08-05 02:16

Summary

An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulting in a denial of service.

Severity

6.1 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE

CWE-787

Assigner

redhat redhat root

References

14 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://www.openwall.com/lists/oss-security/2019/…	x_refsource_MISC
https://lore.kernel.org/kvm/000000000000ea5ec2059…	x_refsource_MISC
http://packetstormsecurity.com/files/155890/Slack…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4254-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4254-2/	vendor-advisoryx_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-2020020…	x_refsource_CONFIRM
https://usn.ubuntu.com/4258-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4287-2/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/4284-1/	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Impacted products

1 product

Vendor	Product	Version
Linux	Kernel	Affected: 3.13 through 5.4

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:16:47.112Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19332"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2019/12/16/1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lore.kernel.org/kvm/000000000000ea5ec20598d90e50%40google.com/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
          },
          {
            "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
          },
          {
            "name": "USN-4254-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-1/"
          },
          {
            "name": "USN-4254-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4254-2/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200204-0002/"
          },
          {
            "name": "USN-4258-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4258-1/"
          },
          {
            "name": "USN-4287-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-1/"
          },
          {
            "name": "USN-4287-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4287-2/"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          },
          {
            "name": "USN-4284-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4284-1/"
          },
          {
            "name": "openSUSE-SU-2020:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kernel",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.13 through 5.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel\u0027s KVM hypervisor handled the \u0027KVM_GET_EMULATED_CPUID\u0027 ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the \u0027/dev/kvm\u0027 device could use this flaw to crash the system, resulting in a denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-13T13:06:31.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19332"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2019/12/16/1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lore.kernel.org/kvm/000000000000ea5ec20598d90e50%40google.com/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html"
        },
        {
          "name": "[debian-lts-announce] 20200118 [SECURITY] [DLA 2068-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
        },
        {
          "name": "USN-4254-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-1/"
        },
        {
          "name": "USN-4254-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4254-2/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200204-0002/"
        },
        {
          "name": "USN-4258-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4258-1/"
        },
        {
          "name": "USN-4287-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-1/"
        },
        {
          "name": "USN-4287-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4287-2/"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        },
        {
          "name": "USN-4284-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4284-1/"
        },
        {
          "name": "openSUSE-SU-2020:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-19332",
    "datePublished": "2020-01-09T14:41:03.000Z",
    "dateReserved": "2019-11-27T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:16:47.112Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-19447 (GCVE-0-2019-19447)

Vulnerability from cvelistv5 – Published: 2019-12-08 00:48 – Updated: 2024-08-05 02:16

Summary

In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://github.com/bobfuzzer/CVE/tree/master/CVE-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2020010…	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2020…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:16:47.116Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
          },
          {
            "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
          },
          {
            "name": "openSUSE-SU-2020:0336",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
          },
          {
            "name": "[debian-lts-announce] 20200609 [SECURITY] [DLA 2241-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html"
          },
          {
            "name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-06-10T12:04:09.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
        },
        {
          "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
        },
        {
          "name": "openSUSE-SU-2020:0336",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
        },
        {
          "name": "[debian-lts-announce] 20200609 [SECURITY] [DLA 2241-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html"
        },
        {
          "name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-19447",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447",
              "refsource": "MISC",
              "url": "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19447"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20200103-0001/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20200103-0001/"
            },
            {
              "name": "[debian-lts-announce] 20200302 [SECURITY] [DLA 2114-1] linux-4.9 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
            },
            {
              "name": "openSUSE-SU-2020:0336",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html"
            },
            {
              "name": "[debian-lts-announce] 20200609 [SECURITY] [DLA 2241-1] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html"
            },
            {
              "name": "[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-19447",
    "datePublished": "2019-12-08T00:48:36.000Z",
    "dateReserved": "2019-11-29T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:16:47.116Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2020:4060

CVE-2019-17055 (GCVE-0-2019-17055)

CVE-2019-18808 (GCVE-0-2019-18808)

CVE-2019-19046 (GCVE-0-2019-19046)

CVE-2019-19055 (GCVE-0-2019-19055)

CVE-2019-19058 (GCVE-0-2019-19058)

CVE-2019-19059 (GCVE-0-2019-19059)

CVE-2019-19062 (GCVE-0-2019-19062)

CVE-2019-19063 (GCVE-0-2019-19063)

CVE-2019-19332 (GCVE-0-2019-19332)

CVE-2019-19447 (GCVE-0-2019-19447)

Tags

Sightings

Nomenclature

Related by attack behaviour