CVE-2019-19043

2019-11-1806:15:11

Debian Security Bug Tracker

security-tracker.debian.org

memory leak

i40e_setup_macvlans

linux kernel

denial of service

memory consumption

i40e_setup_channel

cid-27d461333459

unix

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

14.2%

JSON

A memory leak in the i40e_setup_macvlans() function in drivers/net/ethernet/intel/i40e/i40e_main.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering i40e_setup_channel() failures, aka CID-27d461333459.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 5.4.19-1linux_5.4.19-1_all.deb
Debian11alllinux< 5.4.19-1linux_5.4.19-1_all.deb
Debian999alllinux< 5.4.19-1linux_5.4.19-1_all.deb
Debian13alllinux< 5.4.19-1linux_5.4.19-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 5.4.19-1	linux_5.4.19-1_all.deb
Debian	11	all	linux	< 5.4.19-1	linux_5.4.19-1_all.deb
Debian	999	all	linux	< 5.4.19-1	linux_5.4.19-1_all.deb
Debian	13	all	linux	< 5.4.19-1	linux_5.4.19-1_all.deb