Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2019-11815
HistoryMay 08, 2019 - 2:29 p.m.

CVE-2019-11815

2019-05-0814:29:00
CWE-416
CWE-362
[email protected]
web.nvd.nist.gov
334
cve-2019-11815
issue discovery
rds_tcp_kill_sock
use-after-free
linux kernel
net namespace cleanup

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.8%

JSON

An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.

Affected configurations

NVD
Node
linuxlinux_kernelRange4.3–4.4.179
OR
linuxlinux_kernelRange4.9–4.9.169
OR
linuxlinux_kernelRange4.14–4.14.112
OR
linuxlinux_kernelRange4.19–4.19.35
OR
linuxlinux_kernelRange5.0–5.0.8
OR
linuxlinux_kernelMatch5.1rc1
OR
linuxlinux_kernelMatch5.1rc2
OR
linuxlinux_kernelMatch5.1rc3
OR
linuxlinux_kernelMatch5.1rc4
Node
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch16.04esm
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch19.04
Node
debiandebian_linuxMatch8.0
OR
debiandebian_linuxMatch9.0
Node
opensuseleapMatch15.0
OR
opensuseleapMatch15.1
OR
opensuseleapMatch42.3
Node
netappactive_iq_unified_managerRange9.5≥vmware_vsphere
OR
netapphci_management_nodeMatch-
OR
netappsnapprotectMatch-
OR
netappsolidfireMatch-
OR
netappstorage_replication_adapterMatch7.2vsphere
OR
netappvasa_provider_for_clustered_data_ontapRange7.2≥
OR
netappvirtual_storage_consoleRange7.2≥vsphere
OR
netapphci_compute_nodeMatch-
OR
netapphci_storage_nodeMatch-
Node
netappcn1610Match-
AND
netappcn1610_firmwareMatch-

References

Related

f5 1
redhatcve 1
amazon 2
threatpost 1
cvelist 1
prion 1
debiancve 1
nessus 34
ubuntucve 1
nvd 1
osv 3
openvas 25
ubuntu 7
trendmicroblog 1
symantec 1
cloudfoundry 2
oraclelinux 2
photon 6
suse 3
debian 3
slackware 1
ibm 1
f5
f5
K32019083 : Linux kernel vulnerability CVE-2019-11815
2019-05-23 00:00:00
redhatcve
redhatcve
CVE-2019-11815
2020-03-31 13:58:02
amazon
amazon
Important: kernel
2019-05-20 23:27:00
Important: kernel
2019-05-16 21:48:00
threatpost
threatpost
Linux Kernel Flaw Allows Remote Code-Execution
2019-05-14 15:21:17
cvelist
cvelist
CVE-2019-11815
2019-05-08 13:36:39
prion
prion
Race condition
2019-05-08 14:29:00
debiancve
debiancve
CVE-2019-11815
2019-05-08 14:29:00
nessus
nessus
Amazon Linux 2 : kernel (ALAS-2019-1212)
2019-05-21 00:00:00
Amazon Linux AMI : kernel (ALAS-2019-1212)
2019-05-22 00:00:00
Ubuntu 19.04 : linux, linux-aws, linux-gcp, linux-kvm, linux-raspi2, linux-snapdragon (USN-4005-1)
2019-06-05 00:00:00
ubuntucve
ubuntucve
CVE-2019-11815
2019-05-08 00:00:00
nvd
nvd
CVE-2019-11815
2019-05-08 14:29:00
osv
osv
CVE-2019-11815
2019-05-08 14:29:00
linux - security update
2019-06-17 00:00:00
linux-4.9 - security update
2019-06-17 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4005-1)
2019-06-05 00:00:00
Ubuntu: Security Advisory (USN-4068-2)
2019-07-24 00:00:00
Ubuntu: Security Advisory (USN-4008-3)
2022-08-26 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2019-06-04 00:00:00
Linux kernel (HWE) vulnerabilities
2019-07-23 00:00:00
Linux kernel vulnerabilities
2019-07-23 00:00:00
trendmicroblog
trendmicroblog
This Week in Security News: Trickbots and Infected Containers
2019-05-31 13:05:27
symantec
symantec
Linux Kernel Vulnerabilities May-June 2019
2019-09-05 08:00:00
cloudfoundry
cloudfoundry
USN-4008-2: AppArmor update | Cloud Foundry
2019-06-18 00:00:00
USN-4068-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry
2019-08-29 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2019-06-04 00:00:00
Unbreakable Enterprise kernel security update
2019-06-17 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0160
2019-05-23 00:00:00
Critical Photon OS Security Update - PHSA-2019-0236
2019-05-30 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0236
2019-05-30 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2019-05-31 00:00:00
Security update for the Linux Kernel (important)
2019-05-16 00:00:00
Security update for the Linux Kernel (important)
2019-05-20 00:00:00
debian
debian
[SECURITY] [DSA 4465-1] linux security update
2019-06-17 18:00:31
[SECURITY] [DSA 4465-1] linux security update
2019-06-17 18:00:31
[SECURITY] [DLA 1824-1] linux-4.9 security update
2019-06-18 10:23:55
slackware
slackware
[slackware-security] kernel
2019-06-18 22:33:08
ibm
ibm
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za
2019-07-25 15:25:01

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.8%

JSON
Related for CVE-2019-11815
f51redhatcve1amazon2threatpost1cvelist1prion1debiancve1nessus34ubuntucve1nvd1osv3openvas25ubuntu7trendmicroblog1symantec1cloudfoundry2oraclelinux2photon6suse3debian3slackware1ibm1