PT-2019-14789 · Linux+2 · Linux Kernel+2

Published 2019-09-10 · Updated 2022-03-31 · CVE-2019-16714

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.2.14

Description The issue allows attackers to obtain sensitive information from kernel stack memory. This is due to the tos and flags fields not being initialized in the rds6 inc info copy function in net/rds/recv.c.

Recommendations For versions prior to 5.2.14, update to version 5.2.14 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-909

Related Identifiers

ALT-PU-2019-2673

ALT-PU-2019-2745

ALT-PU-2019-2746

ALT-PU-2019-2768

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

CVE-2019-16714

MGASA-2019-0288

MGASA-2019-0333

USN-4157-1

USN-4157-2

Affected Products

Alt Linux

Linux Kernel

Ubuntu

References · 66

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ptrace_traceme_pkexec_helper.rb · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-13272 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19816 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19039 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19037 · Exploit
• 🔥 https://github.com/tr3ee/CVE-2021-4204 · Exploit
• 🔥 https://github.com/xmzyshypnc/CVE-2020-27194 · Exploit
• 🔥 https://github.com/kiks7/CVE-2020-27786-Kernel-Exploit · Exploit
• 🔥 https://github.com/tdwyer/CVE-2020-25705 · Exploit
• 🔥 https://github.com/oneoy/CVE-2019-13272 · Exploit
• 🔥 https://github.com/Cyc1eC/CVE-2019-13272 · Exploit
• 🔥 https://github.com/ii4gsp/CVE-2020-27786 · Exploit
• 🔥 https://github.com/Limesss/cve-2019-18683 · Exploit
• 🔥 https://github.com/bobfuzzer/CVE-2019-18885 · Exploit