7.1

CVE-2019-25160

netlabel: fix out-of-bounds memory accesses

In the Linux kernel, the following vulnerability has been resolved:

netlabel: fix out-of-bounds memory accesses

There are two array out-of-bounds memory accesses, one in
cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().  Both
errors are embarassingly simple, and the fixes are straightforward.

As a FYI for anyone backporting this patch to kernels prior to v4.8,
you'll want to apply the netlbl_bitmap_walk() patch to
cipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before
Linux v4.8.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.19 < 3.16.66
Linux ≫ Linux Kernel Version >= 3.17.0 < 3.18.137
Linux ≫ Linux Kernel Version >= 3.19.0 < 4.4.177
Linux ≫ Linux Kernel Version >= 4.5.0 < 4.9.163
Linux ≫ Linux Kernel Version >= 4.10.0 < 4.14.106
Linux ≫ Linux Kernel Version >= 4.15.0 < 4.19.28
Linux ≫ Linux Kernel Version >= 4.20.0 < 4.20.15
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.162
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://git.kernel.org/stable/c/1c973f9c7cc2b3caae93192fdc8ecb3f0b4ac000
Patch
https://git.kernel.org/stable/c/5578de4834fe0f2a34fedc7374be691443396d1f
Patch
https://git.kernel.org/stable/c/97bc3683c24999ee621d847c9348c75d2fe86272
Patch
https://git.kernel.org/stable/c/c61d01faa5550e06794dcf86125ccd325bfad950
Patch
https://git.kernel.org/stable/c/dc18101f95fa6e815f426316b8b9a5cee28a334e
Patch
https://git.kernel.org/stable/c/e3713abc4248aa6bcc11173d754c418b02a62cbb
Patch
https://git.kernel.org/stable/c/fbf9578919d6c91100ec63acf2cba641383f6c78
Patch
https://git.kernel.org/stable/c/fcfe700acdc1c72eab231300e82b962bac2b2b2c
Patch