Lucene search

[email protected]CVE-2019-19044

HistoryNov 18, 2019 - 6:15 a.m.

CVE-2019-19044

2019-11-1806:15:11

CWE-401

[email protected]

web.nvd.nist.gov

linux kernel

memory leaks

v3d_submit_cl_ioctl

denial of service

nvd

cve-2019-19044

vulnerability

security

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.1%

JSON

Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.

Affected configurations

NVD

Node

linuxlinux_kernelRange5.3–5.3.11

Node

netappactive_iq_unified_managerMatch-vmware_vsphere

netappaff_baseboard_management_controllerMatch-

netappcloud_backupMatch-

netappdata_availability_servicesMatch-

netappe-series_santricity_os_controllerMatch11.0

netappe-series_santricity_os_controllerMatch11.0.0

netappe-series_santricity_os_controllerMatch11.20

netappe-series_santricity_os_controllerMatch11.25

netappe-series_santricity_os_controllerMatch11.30

netappe-series_santricity_os_controllerMatch11.30.5r3

netappe-series_santricity_os_controllerMatch11.40

netappe-series_santricity_os_controllerMatch11.40.3r2

netappe-series_santricity_os_controllerMatch11.40.5

netappe-series_santricity_os_controllerMatch11.50.1

netappe-series_santricity_os_controllerMatch11.50.2-

netappe-series_santricity_os_controllerMatch11.50.2p1

netappe-series_santricity_os_controllerMatch11.60

netappe-series_santricity_os_controllerMatch11.60.0

netappe-series_santricity_os_controllerMatch11.60.1

netappe-series_santricity_os_controllerMatch11.60.3

netappe-series_santricity_os_controllerMatch11.70.1

netappe-series_santricity_os_controllerMatch11.70.2

netappfas\/aff_baseboard_management_controllerMatch-

netapphci_baseboard_management_controllerMatchh610s

netappsolidfire\,_enterprise_sds_\&_hci_storage_nodeMatch-

netappsolidfire_\&_hci_management_nodeMatch-

netappsteelstore_cloud_integrated_storageMatch-

broadcombrocade_fabric_operating_system_firmwareMatch-

Node

netapphci_compute_node_firmwareMatch-

AND

netapphci_compute_nodeMatch-

Node

netappsolidfire_baseboard_management_controller_firmwareMatch-

AND

netappsolidfire_baseboard_management_controllerMatch-

Node

canonicalubuntu_linuxMatch18.04lts

canonicalubuntu_linuxMatch19.10

CPENameOperatorVersion
linux:linux_kernellinux linux kernellt5.3.11

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	lt	5.3.11

References

cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11

github.com/torvalds/linux/commit/29cd13cfd7624726d9e6becbae9aa419ef35af7f

security.netapp.com/advisory/ntap-20191205-0001/

usn.ubuntu.com/4225-1/

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.1%

JSON

Related for CVE-2019-19044

redhatcve1 prion1 ubuntucve1 cvelist1 nvd1 osv1 debiancve1 nessus1 openvas1 ubuntu1