PT-2019-3220 · Linux+5 · Linux Kernel+5

Publicado

2019-05-13

·

Atualizado

2021-05-28

·

CVE-2019-15090

CVSS v2.0

6.8

Média

VetorAV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.1.12
Description An issue in the Linux kernel's drivers/scsi/qedi/qedi dbg.c file is related to an out-of-bounds read. This issue, associated with the qedi dbg * family of functions, may allow an attacker to gain unauthorized access to protected information.
Recommendations For Linux kernel versions prior to 5.1.12, update to version 5.1.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the qedi dbg * functions until a patch is available.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2019-2116
ALT-PU-2019-2117
ALT-PU-2019-2120
ALT-PU-2019-2311
ALT-PU-2020-1198
ALT-PU-2020-1501
ALT-PU-2020-2410
ALT-PU-2020-2433
ALT-PU-2021-1870
BDU:2019-03209
CESA-2020_1016
CESA-2020_1567
CESA-2020_1769
CVE-2019-15090
OPENSUSE-SU-2019:2173-1
OPENSUSE-SU-2019:2181-1
OPENSUSE-SU-2019_2173-1
OPENSUSE-SU-2019_2181-1
RHSA-2020:1016
RHSA-2020:1567
RHSA-2020:1769
RHSA-2020_1016
RHSA-2020_1567
RHSA-2020_1769
SUSE-SU-2019:2412-1
SUSE-SU-2019:2414-1
SUSE-SU-2019:2424-1
SUSE-SU-2019:2648-1
SUSE-SU-2019:2651-1
SUSE-SU-2019:2658-1
SUSE-SU-2019:2738-1
SUSE-SU-2019:2756-1
USN-4115-1
USN-4115-2
USN-4118-1
USN-4147-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu