ID CVE-2019-19076
Summary A memory leak in the nfp_abm_u32_knode_replace() function in drivers/net/ethernet/netronome/nfp/abm/cls.c in the Linux kernel before 5.3.6 allows attackers to cause a denial of service (memory consumption), aka CID-78beef629fd9. NOTE: This has been argued as not a valid vulnerability. The upstream commit 78beef629fd9 was reverted
References
Vulnerable Configurations
  • cpe:2.3:o:linux:linux_kernel:3.2.94:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:3.2.94:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.2.95:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:3.2.95:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.2.96:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:3.2.96:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.2.97:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:3.2.97:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.2.98:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:3.2.98:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:3.2.99:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:3.2.99:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
CVSS
Base: 7.1 (as of 17-05-2024 - 01:35)
Impact:
Exploitability:
CWE CWE-401
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:C
refmap via4
confirm https://security.netapp.com/advisory/ntap-20191205-0001/
misc
ubuntu USN-4209-1
Last major update 17-05-2024 - 01:35
Published 18-11-2019 - 06:15
Last modified 17-05-2024 - 01:35
Back to Top