Lucene search

K
ubuntucve
Ubuntu.comUB:CVE-2019-19049
HistoryNov 18, 2019 - 12:00 a.m.

CVE-2019-19049

2019-11-1800:00:00
ubuntu.com
ubuntu.com
6

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

67.5%

DISPUTED A memory leak in the unittest_data_add() function in
drivers/of/unittest.c in the Linux kernel before 5.3.10 allows attackers to
cause a denial of service (memory consumption) by triggering
of_fdt_unflatten_tree() failures, aka CID-e13de8fe0d6a. NOTE: third parties
dispute the relevance of this because unittest.c can only be reached during
boot.

Notes

Author Note
sbeattie CONFIG_OF_UNITTEST is disabled in xenial-eoan in trusty and before, the option is CONFIG_OF_SELFTEST also disabled
How to protect your server from attacks?

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.003 Low

EPSS

Percentile

67.5%

Related for UB:CVE-2019-19049