PT-2019-19698 · Intel · Spdk

Dima Stepanov + 1 · Publicado 2019-03-01 · Atualizado 2021-07-21 · CVE-2019-9547

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Storage Performance Development Kit (SPDK) versions prior to 19.01

Description A malicious vhost client could construct a circular descriptor chain, resulting in a partial denial of service in the SPDK vhost target. This occurs because the vhost target did not properly detect such chains.

Recommendations For versions prior to 19.01, update to version 19.01 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-834

Identificadores relacionados

CVE-2019-9547

Produtos afetados

Spdk

Referências · 4

• https://github.com/spdk/spdk/releases/tag/v19.01 · Nota
• https://github.com/spdk/spdk/commit/eca42c66092b9031711afe215fbc1891ee55f143 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-9547 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9547 · Aviso do Fabricante