Lucene search

[email protected]CVE-2019-19063

HistoryNov 18, 2019 - 6:15 a.m.

CVE-2019-19063

2019-11-1806:15:12

CWE-401

[email protected]

web.nvd.nist.gov

323

cve-2019-19063

memory leaks

rtl_usb_probe

linux kernel

dos

cid-3f9361695113

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.2%

JSON

Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption), aka CID-3f9361695113.

Affected configurations

NVD

Node

linuxlinux_kernelRange≤5.3.11

Node

oraclesd-wan_edgeMatch8.2

canonicalubuntu_linuxMatch14.04esm

canonicalubuntu_linuxMatch16.04esm

canonicalubuntu_linuxMatch16.04lts

canonicalubuntu_linuxMatch18.04lts

canonicalubuntu_linuxMatch19.10

fedoraprojectfedoraMatch30

fedoraprojectfedoraMatch31

opensuseleapMatch15.1

Node

netappactive_iq_unified_managerMatch-vmware_vsphere

netappaff_baseboard_management_controllerMatch-

netappcloud_backupMatch-

netappdata_availability_servicesMatch-

netappe-series_santricity_os_controllerMatch11.0

netappe-series_santricity_os_controllerMatch11.0.0

netappe-series_santricity_os_controllerMatch11.20

netappe-series_santricity_os_controllerMatch11.25

netappe-series_santricity_os_controllerMatch11.30

netappe-series_santricity_os_controllerMatch11.30.5r3

netappe-series_santricity_os_controllerMatch11.40

netappe-series_santricity_os_controllerMatch11.40.3r2

netappe-series_santricity_os_controllerMatch11.40.5

netappe-series_santricity_os_controllerMatch11.50.1

netappe-series_santricity_os_controllerMatch11.50.2-

netappe-series_santricity_os_controllerMatch11.50.2p1

netappe-series_santricity_os_controllerMatch11.60

netappe-series_santricity_os_controllerMatch11.60.0

netappe-series_santricity_os_controllerMatch11.60.1

netappe-series_santricity_os_controllerMatch11.60.3

netappe-series_santricity_os_controllerMatch11.70.1

netappe-series_santricity_os_controllerMatch11.70.2

netappfas\/aff_baseboard_management_controllerMatch-

netapphci_baseboard_management_controllerMatchh610s

netappsolidfire\,_enterprise_sds_\&_hci_storage_nodeMatch-

netappsolidfire_\&_hci_management_nodeMatch-

netappsteelstore_cloud_integrated_storageMatch-

broadcombrocade_fabric_operating_system_firmwareMatch-

Node

netapphci_compute_node_firmwareMatch-

AND

netapphci_compute_nodeMatch-

Node

netappsolidfire_baseboard_management_controller_firmwareMatch-

AND

netappsolidfire_baseboard_management_controllerMatch-

CPENameOperatorVersion
linux:linux_kernellinux linux kernelle5.3.11

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	le	5.3.11

References

lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html

packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

github.com/torvalds/linux/commit/3f93616951138a598d930dcaec40f2bfd9ce43bb

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3PSDE6PTOTVBK2YTKB2TFQP2SUBVSNF/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PY7LJMSPAGRIKABJPDKQDTXYW3L5RX2T/

seclists.org/bugtraq/2020/Jan/10

security.netapp.com/advisory/ntap-20191205-0001/

usn.ubuntu.com/4254-1/

usn.ubuntu.com/4254-2/

usn.ubuntu.com/4284-1/

usn.ubuntu.com/4285-1/

usn.ubuntu.com/4287-1/

usn.ubuntu.com/4287-2/

www.oracle.com/security-alerts/cpuApr2021.html

Social References

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.2%

JSON

Related for CVE-2019-19063

nvd1 cvelist1 ubuntucve1 prion1 osv2 f51 debiancve1 veracode1 redhatcve1 oraclelinux4 nessus41 openvas38 ubuntu6 slackware1 cloudfoundry1 symantec1 fedora15 suse1 redhat6 almalinux1 ibm2 centos1 oracle1