7.8
CVE-2019-8980
- EPSS 5.85%
- Veröffentlicht 21.02.2019 05:29:01
- Zuletzt bearbeitet 21.11.2024 04:50:44
- Erkennungen
A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.7 < 4.9.163
Linux ≫ Linux Kernel Version >= 4.14 < 4.14.106
Linux ≫ Linux Kernel Version >= 4.19 < 4.19.28
Linux ≫ Linux Kernel Version >= 4.20 < 4.20.15
Linux ≫ Linux Kernel Version >= 5.0 < 5.0.1
Linux ≫ Linux Kernel Version 5.1 Update rc1
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 18.10
Debian ≫ Debian Linux Version 8.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.85% | 0.922 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| NIST | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-401 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html
https://usn.ubuntu.com/3931-1/
https://usn.ubuntu.com/3931-2/
https://usn.ubuntu.com/3930-1/
https://usn.ubuntu.com/3930-2/
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html
http://www.securityfocus.com/bid/107120
https://support.f5.com/csp/article/K56480726
https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1935698.html
https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1935705.html