PT-2020-10141 · Red Hat+2 · Red Hat Enterprise Linux 8+2

Published 2019-12-17 · Updated 2020-10-19 · CVE-2019-19339

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux 8 (affected versions not specified)

Description A flaw was found in the way Intel CPUs handle inconsistency between virtual to physical memory address translations in the CPU's local cache and system software's Paging structure entries. This issue can be exploited by a privileged guest user to induce a hardware Machine Check Error on the host processor, resulting in a severe DoS scenario by halting the processor. The vulnerability is related to the handling of virtual memory addresses and the invalidation of address translations in the processor's Translation Lookaside Buffer (TLB) cache.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-805

Related Identifiers

CESA-2019_4245

CVE-2019-19339

RHSA-2019:4245

Affected Products

Centos

Intel Cpus

Red Hat Enterprise Linux 8

References · 3

• https://osv.dev/vulnerability/CVE-2019-19339 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19339 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19339 · Vendor Advisory