7.8

CVE-2019-8980

A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.7 < 4.9.163
Linux ≫ Linux Kernel Version >= 4.14 < 4.14.106
Linux ≫ Linux Kernel Version >= 4.19 < 4.19.28
Linux ≫ Linux Kernel Version >= 4.20 < 4.20.15
Linux ≫ Linux Kernel Version >= 5.0 < 5.0.1
Linux ≫ Linux Kernel Version5.1 Updaterc1
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version18.10
Opensuse ≫ Leap Version15.0
Debian ≫ Debian Linux Version8.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.85% 0.922
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html
Third Party Advisory
Mailing List
https://usn.ubuntu.com/3931-1/
Third Party Advisory
https://usn.ubuntu.com/3931-2/
Third Party Advisory
https://usn.ubuntu.com/3930-1/
Third Party Advisory
https://usn.ubuntu.com/3930-2/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/107120
Third Party Advisory
VDB Entry
https://support.f5.com/csp/article/K56480726
Third Party Advisory
https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1935698.html
https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1935705.html