CVE-2019-19081

EPSS 3.26%
Veröffentlicht 18.11.2019 06:15:13
Zuletzt bearbeitet 08.10.2026 21:17:18
Erkennungen
Login

A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory consumption), aka CID-8ce39eb5a67a.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

NVD 4 VulnDex Vulnerability Enrichment 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version < 5.3.4

Opensuse ≫ Leap Version 15.1

Redhat ≫ Enterprise Linux Version 7.0

Redhat ≫ Enterprise Linux Version 8.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.26%	0.868

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	7.1	8.6	6.9	AV:N/AC:M/Au:N/C:N/I:N/A:C

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html

Third Party Advisory

https://security.netapp.com/advisory/ntap-20191205-0001/

Third Party Advisory

https://github.com/torvalds/linux/commit/8ce39eb5a67aee25d9f05b40b673c95b23502e3e

Patch

Third Party Advisory

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-19081

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-19081

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-19081

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-19081