7.1

CVE-2019-25160

In the Linux kernel, the following vulnerability has been resolved:

netlabel: fix out-of-bounds memory accesses

There are two array out-of-bounds memory accesses, one in
cipso_v4_map_lvl_valid(), the other in netlbl_bitmap_walk().  Both
errors are embarassingly simple, and the fixes are straightforward.

As a FYI for anyone backporting this patch to kernels prior to v4.8,
you'll want to apply the netlbl_bitmap_walk() patch to
cipso_v4_bitmap_walk() as netlbl_bitmap_walk() doesn't exist before
Linux v4.8.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.19 < 3.16.66
Linux ≫ Linux Kernel Version >= 3.17.0 < 3.18.137
Linux ≫ Linux Kernel Version >= 3.19.0 < 4.4.177
Linux ≫ Linux Kernel Version >= 4.5.0 < 4.9.163
Linux ≫ Linux Kernel Version >= 4.10.0 < 4.14.106
Linux ≫ Linux Kernel Version >= 4.15.0 < 4.19.28
Linux ≫ Linux Kernel Version >= 4.20.0 < 4.20.15
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.01% 0.016
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.