PT-2019-14789 · Linux+2 · Linux Kernel+2

Publicado 2019-09-10 · Atualizado 2022-03-31 · CVE-2019-16714

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.14

Description The issue allows attackers to obtain sensitive information from kernel stack memory. This is due to the tos and flags fields not being initialized in the rds6 inc info copy function in net/rds/recv.c.

Recommendations For versions prior to 5.2.14, update to version 5.2.14 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-909

Identificadores relacionados

ALT-PU-2019-2673

ALT-PU-2019-2745

ALT-PU-2019-2746

ALT-PU-2019-2768

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

CVE-2019-16714

MGASA-2019-0288

MGASA-2019-0333

USN-4157-1

USN-4157-2

Produtos afetados

Alt Linux

Linux Kernel

Ubuntu

Referências · 66

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ptrace_traceme_pkexec_helper.rb · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-13272 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19816 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2020-27194 · Exploit
• 🔥 https://github.com/kiks7/CVE-2020-27786-Kernel-Exploit · Exploit
• 🔥 https://github.com/tdwyer/CVE-2020-25705 · Exploit
• 🔥 https://github.com/oneoy/CVE-2019-13272 · Exploit
• 🔥 https://github.com/Cyc1eC/CVE-2019-13272 · Exploit
• 🔥 https://github.com/ii4gsp/CVE-2020-27786 · Exploit
• 🔥 https://github.com/Limesss/cve-2019-18683 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE-2019-18885 · Exploit