CVE-2019-11191

🗓️ 11 Apr 2019 23:07:29Reported by mitreType

cve🔗 web.nvd.nist.gov👁 306 Views🌐 WEB

The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users to bypass ASLR on setuid a.out programs

Reporter	Title	Published	Views	Family All 192
BDU FSTEC	The vulnerability of the load_aout_binary() function in the Linux operating system’s kernel allows a hacker to bypass the ASLR protection mechanism.	2 Jun 202000:00	–	bdu_fstec
Cloud Foundry	USN-4008-2: AppArmor update \| Cloud Foundry	18 Jun 201900:00	–	cloudfoundry
Cvelist	CVE-2019-11191	11 Apr 201923:07	–	cvelist
Debian CVE	CVE-2019-11191	11 Apr 201923:07	–	debiancve
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1012)	2 Jan 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2020-1536)	1 May 202000:00	–	nessus
Tenable Nessus	openSUSE Security Update : the Linux Kernel (openSUSE-2019-1570) (SACK Panic) (SACK Slowness)	19 Jun 201900:00	–	nessus
Tenable Nessus	Photon OS 2.0: Linux PHSA-2019-2.0-0161	22 Jul 202400:00	–	nessus
Tenable Nessus	Ubuntu 18.10 : linux, linux-aws, linux-gcp, linux-kvm, linux-raspi2 vulnerability (USN-4006-1)	5 Jun 201900:00	–	nessus
Tenable Nessus	Ubuntu 18.04 LTS : Linux kernel (HWE) vulnerability (USN-4006-2)	5 Jun 201900:00	–	nessus

NVD

Node

Source	Link
usn	www.usn.ubuntu.com/4007-2/
usn	www.usn.ubuntu.com/4007-1/
usn	www.usn.ubuntu.com/4008-3/
openwall	www.openwall.com/lists/oss-security/2019/04/18/5
openwall	www.openwall.com/lists/oss-security/2019/04/03/4/1
openwall	www.openwall.com/lists/oss-security/2019/04/03/4
openwall	www.openwall.com/lists/oss-security/2019/05/22/7
usn	www.usn.ubuntu.com/4006-2/
lists	www.lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
usn	www.usn.ubuntu.com/4008-1/

Parameter	Position	Path	Description	CWE
pid	path	/proc/pid/stat	Race condition in reading /proc/pid/stat that can be exploited to bypass ASLR for setuid a.out due to late install_exec_creds in aout loader (CVE-2019-11191).	CWE-362

17 Jun 2026 02:12Current

5Medium risk

Vulners AI Score5

CVSS 21.9

CVSS 32.5

EPSS0.00511