PT-2019-3983 · Linux+1 · Linux Kernel+1

Publicado 2019-10-28 · Atualizado 2024-06-15 · CVE-2019-18812

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.9

Description A memory leak in the sof dfsentry write() function allows attackers to cause a denial of service due to memory consumption. The issue is related to uncontrolled resource consumption.

Recommendations For Linux kernel versions through 5.3.9, consider updating to a version that contains a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Leak

Resource Exhaustion

Enumeração de Fraquezas

CWE-401

CWE-400

Identificadores relacionados

ALT-PU-2019-3291

ALT-PU-2019-3343

ALT-PU-2019-3369

ALT-PU-2020-1421

ALT-PU-2020-1450

BDU:2019-04514

CVE-2019-18812

OPENSUSE-SU-2024:10728-1

OPENSUSE-SU-2024:13704-1

Produtos afetados

Alt Linux

Linux Kernel

Referências · 209

• https://github.com/torvalds/linux/commit/c0a333d842ef67ac04adc72ff79dc1ccc3dca4ed · Correção
• https://suse.com/security/cve/CVE-2017-16536 · Nota
• https://suse.com/security/cve/CVE-2019-18812 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-18812 · Nota de Segurança
• https://suse.com/security/cve/CVE-2021-26708 · Nota
• https://suse.com/security/cve/CVE-2022-1679 · Nota
• https://ubuntu.com/security/CVE-2019-18812 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-6610 · Nota
• https://suse.com/security/cve/CVE-2021-33909 · Nota
• https://suse.com/security/cve/CVE-2018-8043 · Nota
• https://suse.com/security/cve/CVE-2022-3640 · Nota
• https://suse.com/security/cve/CVE-2022-28389 · Nota
• https://suse.com/security/cve/CVE-2022-44032 · Nota
• https://suse.com/security/cve/CVE-2022-1462 · Nota
• https://suse.com/security/cve/CVE-2022-1973 · Nota