7.8
CVE-2019-15538
- EPSS 16.43%
- Veröffentlicht 25.08.2019 16:15:11
- Zuletzt bearbeitet 21.11.2024 04:28:57
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.7 < 4.9.191
Linux ≫ Linux Kernel Version >= 4.14 < 4.14.141
Linux ≫ Linux Kernel Version >= 4.19 < 4.19.69
Linux ≫ Linux Kernel Version >= 5.2 < 5.2.11
Linux ≫ Linux Kernel Version5.3 Update-
Linux ≫ Linux Kernel Version5.3 Updaterc1
Linux ≫ Linux Kernel Version5.3 Updaterc2
Linux ≫ Linux Kernel Version5.3 Updaterc3
Linux ≫ Linux Kernel Version5.3 Updaterc4
Linux ≫ Linux Kernel Version5.3 Updaterc5
Linux ≫ Linux Kernel Version5.3 Updaterc6
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version19.04
Netapp ≫ Data Availability Services Version-
Netapp ≫ Hci Management Node Version-
Netapp ≫ Aff A700s Firmware Version-
Netapp ≫ H300s Firmware Version-
Netapp ≫ H500s Firmware Version-
Netapp ≫ H700s Firmware Version-
Netapp ≫ H300e Firmware Version-
Netapp ≫ H500e Firmware Version-
Netapp ≫ H700e Firmware Version-
Netapp ≫ H410s Firmware Version-
Netapp ≫ H410c Firmware Version-
Netapp ≫ H610s Firmware Version-
Debian ≫ Debian Linux Version8.0
Fedoraproject ≫ Fedora Version29
Fedoraproject ≫ Fedora Version30
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 16.43% | 0.947 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.