CVE-2019-19052

EPSS 1.51%
Veröffentlicht 18.11.2019 06:15:11
Zuletzt bearbeitet 21.11.2024 04:34:04
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 17

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 3.16 < 3.16.79

Linux ≫ Linux Kernel Version >= 3.17 < 4.4.201

Linux ≫ Linux Kernel Version >= 4.5 < 4.9.201

Linux ≫ Linux Kernel Version >= 4.10 < 4.14.154

Linux ≫ Linux Kernel Version >= 4.15 < 4.19.84

Linux ≫ Linux Kernel Version >= 4.20 < 5.3.11

Oracle ≫ Sd-wan Edge Version8.2

Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version19.04

Canonical ≫ Ubuntu Linux Version19.10

Debian ≫ Debian Linux Version8.0

Opensuse ≫ Leap Version15.1

Netapp ≫ Active Iq Unified Manager Version- SwPlatformvmware_vsphere

Netapp ≫ Aff Baseboard Management Controller Version-

Netapp ≫ Cloud Backup Version-

Netapp ≫ Data Availability Services Version-

Netapp ≫ E-series Santricity Os Controller Version11.0

Netapp ≫ E-series Santricity Os Controller Version11.0.0

Netapp ≫ E-series Santricity Os Controller Version11.20

Netapp ≫ E-series Santricity Os Controller Version11.25

Netapp ≫ E-series Santricity Os Controller Version11.30

Netapp ≫ E-series Santricity Os Controller Version11.30.5r3

Netapp ≫ E-series Santricity Os Controller Version11.40

Netapp ≫ E-series Santricity Os Controller Version11.40.3r2

Netapp ≫ E-series Santricity Os Controller Version11.40.5

Netapp ≫ E-series Santricity Os Controller Version11.50.1

Netapp ≫ E-series Santricity Os Controller Version11.50.2 Update-

Netapp ≫ E-series Santricity Os Controller Version11.50.2 Updatep1

Netapp ≫ E-series Santricity Os Controller Version11.60

Netapp ≫ E-series Santricity Os Controller Version11.60.0

Netapp ≫ E-series Santricity Os Controller Version11.60.1

Netapp ≫ E-series Santricity Os Controller Version11.60.3

Netapp ≫ E-series Santricity Os Controller Version11.70.1

Netapp ≫ E-series Santricity Os Controller Version11.70.2

Netapp ≫ Fas/aff Baseboard Management Controller Version-

Netapp ≫ Hci Baseboard Management Controller Versionh610s

Netapp ≫ Solidfire, Enterprise Sds & Hci Storage Node Version-

Netapp ≫ Solidfire & Hci Management Node Version-

Netapp ≫ Steelstore Cloud Integrated Storage Version-

Broadcom ≫ Brocade Fabric Operating System Firmware Version-

Netapp ≫ Hci Compute Node Firmware Version-

Netapp ≫ Hci Compute Node Version-

Netapp ≫ Solidfire Baseboard Management Controller Firmware Version-

Netapp ≫ Solidfire Baseboard Management Controller Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.51%	0.806

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

https://www.oracle.com/security-alerts/cpuApr2021.html

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

Third Party Advisory

Mailing List

https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html

Third Party Advisory

https://usn.ubuntu.com/4225-1/

Third Party Advisory

https://usn.ubuntu.com/4225-2/

Third Party Advisory

https://usn.ubuntu.com/4226-1/

Third Party Advisory

https://usn.ubuntu.com/4227-1/

Third Party Advisory

https://usn.ubuntu.com/4227-2/

Third Party Advisory

https://security.netapp.com/advisory/ntap-20191205-0001/

Third Party Advisory

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11

Vendor Advisory

Release Notes

https://github.com/torvalds/linux/commit/fb5be6a7b4863ecc44963bb80ca614584b6c7817

Patch

Third Party Advisory

https://usn.ubuntu.com/4228-1/

Third Party Advisory

https://usn.ubuntu.com/4228-2/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-19052

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-19052

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-19052

EUVD