Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2019-18809
HistoryNov 07, 2019 - 12:00 a.m.

CVE-2019-18809

2019-11-0700:00:00
ubuntu.com
ubuntu.com
28

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

65.0%

JSON

A memory leak in the af9005_identify_state() function in
drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through 5.3.9 allows
attackers to cause a denial of service (memory consumption), aka
CID-2289adbfa559.

Notes

Author Note
tyhicks The Fixes tag in the fix commit is incorrect. c58b84ee467b introduced the leak.
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-88.88UNKNOWN
ubuntu19.10noarchlinux< 5.3.0-42.34UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1060.62UNKNOWN
ubuntu19.10noarchlinux-aws< 5.3.0-1013.14UNKNOWN
ubuntu18.04noarchlinux-aws-5.0< 5.0.0-1025.28UNKNOWN
ubuntu16.04noarchlinux-aws-hwe< 4.15.0-1060.62~16.04.1UNKNOWN
ubuntu18.04noarchlinux-azure< 5.0.0-1032.34UNKNOWN
ubuntu19.10noarchlinux-azure< 5.3.0-1016.17UNKNOWN
ubuntu14.04noarchlinux-azure< 4.15.0-1071.76~14.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchlinux-azure< 4.15.0-1071.76UNKNOWN
Rows per page:
1-10 of 341

Related

redhatcve 1
cve 1
veracode 1
prion 1
debiancve 1
nessus 23
oraclelinux 2
ubuntu 4
openvas 28
cloudfoundry 1
ibm 1
fedora 11
suse 1
redhat 4
almalinux 1
osv 2
debian 1
redhatcve
redhatcve
CVE-2019-18809
2019-12-21 10:00:02
cve
cve
CVE-2019-18809
2019-11-07 16:15:00
veracode
veracode
Denial Of Service (DoS)
2020-11-05 03:09:32
prion
prion
Memory corruption
2019-11-07 16:15:00
debiancve
debiancve
CVE-2019-18809
2019-11-07 16:15:00
nessus
nessus
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5649)
2020-04-15 00:00:00
Fedora 30 : kernel (2019-124a241044)
2019-12-09 00:00:00
Fedora 31 : kernel (2019-b86a7bdba0)
2019-12-06 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2020-04-13 00:00:00
kernel security, bug fix, and enhancement update
2020-11-10 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2020-03-25 00:00:00
Linux kernel vulnerabilities
2020-02-18 00:00:00
Linux kernel vulnerabilities
2020-02-18 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4300-1)
2020-03-17 00:00:00
Ubuntu: Security Advisory (USN-4285-1)
2020-02-19 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-2283)
2020-01-23 00:00:00
cloudfoundry
cloudfoundry
USN-4287-1: Linux kernel vulnerabilities | Cloud Foundry
2020-03-10 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM Spectrum Protect Plus
2020-02-22 00:41:51
fedora
fedora
[SECURITY] Fedora 31 Update: kernel-5.4.19-200.fc31
2020-02-18 01:46:48
[SECURITY] Fedora 31 Update: kernel-5.5.6-201.fc31
2020-02-29 03:22:04
[SECURITY] Fedora 31 Update: kernel-5.3.16-300.fc31
2019-12-17 01:46:08
suse
suse
Security update for the Linux Kernel (important)
2019-12-12 00:00:00
redhat
redhat
(RHSA-2020:4609) Moderate: kernel-rt security and bug fix update
2020-11-03 12:20:02
(RHSA-2020:4431) Moderate: kernel security, bug fix, and enhancement update
2020-11-03 12:03:57
(RHSA-2020:5635) Moderate: OpenShift Container Platform 4.7.0 extras and security update
2021-02-24 14:47:52
almalinux
almalinux
Moderate: kernel security, bug fix, and enhancement update
2020-11-03 12:03:57
osv
osv
Moderate: kernel security, bug fix, and enhancement update
2020-11-03 12:03:57
linux-4.9 - security update
2020-02-21 00:00:00
debian
debian
[SECURITY] [DLA 2114-1] linux-4.9 security update
2020-03-02 18:14:56

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

65.0%

JSON
Related for UB:CVE-2019-18809
redhatcve1cve1veracode1prion1debiancve1nessus23oraclelinux2ubuntu4openvas28cloudfoundry1ibm1fedora11suse1redhat4almalinux1osv2debian1