4.4

CVE-2019-15030

Exploit
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version <= 5.2.14
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 19.04
Opensuse ≫ Leap Version 15.0
Opensuse ≫ Leap Version 15.1
Redhat ≫ Enterprise Linux Version 7.0
Redhat ≫ Enterprise Linux Version 8.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.45% 0.357
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.4 1.8 2.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
NIST 3.6 3.9 4.9
AV:L/AC:L/Au:N/C:P/I:N/A:P
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://access.redhat.com/errata/RHSA-2020:0740
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html
Third Party Advisory
https://security.netapp.com/advisory/ntap-20191004-0001/
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/09/10/3
Patch
Third Party Advisory
Mailing List
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8205d5d98ef7f155de211f5e2eb6ca03d95a5a60
Patch
Vendor Advisory
Exploit
Mailing List
https://usn.ubuntu.com/4135-1/
Third Party Advisory
https://usn.ubuntu.com/4135-2/
Third Party Advisory