9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.024 Low
EPSS
Percentile
89.9%
It was discovered that a heap-based buffer overflow existed in the Marvell
WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could
use this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2019-14895, CVE-2019-14901)
It was discovered that a heap-based buffer overflow existed in the Marvell
Libertas WLAN Driver for the Linux kernel. A physically proximate attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2019-14896, CVE-2019-14897)
It was discovered that the Fujitsu ES network device driver for the Linux
kernel did not properly check for errors in some situations, leading to a
NULL pointer dereference. A local attacker could use this to cause a denial
of service. (CVE-2019-16231)
Anthony Steinhauser discovered that the Linux kernel did not properly
perform Spectre_RSB mitigations to all processors for PowerPC architecture
systems in some situations. A local attacker could use this to expose
sensitive information. (CVE-2019-18660)
It was discovered that the Broadcom V3D DRI driver in the Linux kernel did
not properly deallocate memory in certain error conditions. A local
attacker could possibly use this to cause a denial of service (kernel
memory exhaustion). (CVE-2019-19044)
It was discovered that the Mellanox Technologies Innova driver in the Linux
kernel did not properly deallocate memory in certain failure conditions. A
local attacker could use this to cause a denial of service (kernel memory
exhaustion). (CVE-2019-19045)
It was discovered that the Mellanox Technologies ConnectX driver in the
Linux kernel did not properly deallocate memory in certain failure
conditions. A local attacker could use this to cause a denial of service
(kernel memory exhaustion). (CVE-2019-19047)
It was discovered that the Intel WiMAX 2400 driver in the Linux kernel did
not properly deallocate memory in certain situations. A local attacker
could use this to cause a denial of service (kernel memory exhaustion).
(CVE-2019-19051)
It was discovered that Geschwister Schneider USB CAN interface driver in
the Linux kernel did not properly deallocate memory in certain failure
conditions. A physically proximate attacker could use this to cause a
denial of service (kernel memory exhaustion). (CVE-2019-19052)
It was discovered that the netlink-based 802.11 configuration interface in
the Linux kernel did not deallocate memory in certain error conditions. A
local attacker could possibly use this to cause a denial of service (kernel
memory exhaustion). (CVE-2019-19055)
It was discovered that the event tracing subsystem of the Linux kernel did
not properly deallocate memory in certain error conditions. A local
attacker could use this to cause a denial of service (kernel memory
exhaustion). (CVE-2019-19072)
It was discovered that the driver for memoryless force-feedback input
devices in the Linux kernel contained a use-after-free vulnerability. A
physically proximate attacker could possibly use this to cause a denial of
service (system crash) or execute arbitrary code. (CVE-2019-19524)
It was discovered that the Microchip CAN BUS Analyzer driver in the Linux
kernel contained a use-after-free vulnerability on device disconnect. A
physically proximate attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2019-19529)
It was discovered that the PEAK-System Technik USB driver in the Linux
kernel did not properly sanitize memory before sending it to the device. A
physically proximate attacker could use this to expose sensitive
information (kernel memory). (CVE-2019-19534)
Tristan Madani discovered that the ALSA timer implementation in the Linux
kernel contained a use-after-free vulnerability. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2019-19807)
It was discovered that the DesignWare USB3 controller driver in the Linux
kernel did not properly deallocate memory in some error conditions. A local
attacker could possibly use this to cause a denial of service (memory
exhaustion). (CVE-2019-18813)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 19.10 | noarch | linux-image-5.3.0-1008-oracle | < 5.3.0-1008.9 | UNKNOWN |
Ubuntu | 19.10 | noarch | linux-image-5.3.0-1008-oracle-dbgsym | < 5.3.0-1008.9 | UNKNOWN |
Ubuntu | 19.10 | noarch | linux-image-5.3.0-1009-aws | < 5.3.0-1009.10 | UNKNOWN |
Ubuntu | 19.10 | noarch | linux-aws-headers-5.3.0-1009 | < 5.3.0-1009.10 | UNKNOWN |
Ubuntu | 19.10 | noarch | linux-aws-tools-5.3.0-1009 | < 5.3.0-1009.10 | UNKNOWN |
Ubuntu | 19.10 | noarch | linux-buildinfo-5.3.0-1009-aws | < 5.3.0-1009.10 | UNKNOWN |
Ubuntu | 19.10 | noarch | linux-headers-5.3.0-1009-aws | < 5.3.0-1009.10 | UNKNOWN |
Ubuntu | 19.10 | noarch | linux-image-5.3.0-1009-aws-dbgsym | < 5.3.0-1009.10 | UNKNOWN |
Ubuntu | 19.10 | noarch | linux-modules-5.3.0-1009-aws | < 5.3.0-1009.10 | UNKNOWN |
Ubuntu | 19.10 | noarch | linux-modules-extra-5.3.0-1009-aws | < 5.3.0-1009.10 | UNKNOWN |
ubuntu.com/security/CVE-2019-14895
ubuntu.com/security/CVE-2019-14896
ubuntu.com/security/CVE-2019-14897
ubuntu.com/security/CVE-2019-14901
ubuntu.com/security/CVE-2019-16231
ubuntu.com/security/CVE-2019-18660
ubuntu.com/security/CVE-2019-18813
ubuntu.com/security/CVE-2019-19044
ubuntu.com/security/CVE-2019-19045
ubuntu.com/security/CVE-2019-19047
ubuntu.com/security/CVE-2019-19051
ubuntu.com/security/CVE-2019-19052
ubuntu.com/security/CVE-2019-19055
ubuntu.com/security/CVE-2019-19072
ubuntu.com/security/CVE-2019-19524
ubuntu.com/security/CVE-2019-19529
ubuntu.com/security/CVE-2019-19534
ubuntu.com/security/CVE-2019-19807
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.024 Low
EPSS
Percentile
89.9%