CVE-2019-19060

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-401

Affected Products (43)

linux · linux_kernel (up to 4.4.262)vulnerable

linux · linux_kernel (up to 4.9.262)vulnerable

linux · linux_kernel (up to 4.14.226)vulnerable

linux · linux_kernel (up to 4.19.82)vulnerable

linux · linux_kernel (up to 5.3.9)vulnerable

netapp · active_iq_unified_managervulnerable

netapp · aff_baseboard_management_controllervulnerable

netapp · cloud_backupvulnerable

netapp · data_availability_servicesvulnerable

netapp · e-series_santricity_os_controllervulnerable

netapp · fas\/aff_baseboard_management_controllervulnerable

netapp · hci_baseboard_management_controllervulnerable

netapp · solidfire\,_enterprise_sds_\&_hci_storage_nodevulnerable

netapp · solidfire_\&_hci_management_nodevulnerable

netapp · steelstore_cloud_integrated_storagevulnerable

broadcom · brocade_fabric_operating_system_firmwarevulnerable

netapp · hci_compute_node_firmwarevulnerable

netapp · hci_compute_node

netapp · solidfire_baseboard_management_controller_firmwarevulnerable

netapp · solidfire_baseboard_management_controller

canonical · ubuntu_linuxvulnerable

opensuse · leapvulnerable

References (16)

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html

Third Party Advisory

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9

Release NotesVendor Advisory

https://github.com/torvalds/linux/commit/ab612b1daf415b62c58e130cb3d0f30b255a14d0

PatchThird Party Advisory

https://security.netapp.com/advisory/ntap-20191205-0001/

Third Party Advisory

https://usn.ubuntu.com/4208-1/

Third Party Advisory

https://usn.ubuntu.com/4210-1/

Third Party Advisory

https://usn.ubuntu.com/4226-1/

Third Party Advisory

https://usn.ubuntu.com/4364-1/

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html

Third Party Advisory

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9

Release NotesVendor Advisory

https://github.com/torvalds/linux/commit/ab612b1daf415b62c58e130cb3d0f30b255a14d0

PatchThird Party Advisory

https://security.netapp.com/advisory/ntap-20191205-0001/

Third Party Advisory

https://usn.ubuntu.com/4208-1/

Third Party Advisory

https://usn.ubuntu.com/4210-1/

Third Party Advisory

https://usn.ubuntu.com/4226-1/

Third Party Advisory

https://usn.ubuntu.com/4364-1/

Third Party Advisory