PT-2019-3980 · Linux+7 · Linux Kernel+7
Publicado
2019-10-05
·
Atualizado
2024-06-15
·
CVE-2019-18808
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.3.9
Description
A memory leak in the
ccp run sha cmd() function in the Linux kernel allows attackers to cause a denial of service due to memory consumption. This issue can be exploited by a remote attacker to disrupt service.Recommendations
For Linux kernel versions through 5.3.9, update to a version later than 5.3.9 to resolve the issue.
As a temporary workaround, consider restricting access to the
ccp run sha cmd() function until a patch is available.Correção
DoS
Memory Leak
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu