Veracode Vulnerability DatabaseVERACODE:19935Denial Of Service
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
Linux kernel is vulnerable denial of service attacks. Remote unauthenticated attackers can achieve Program Counter control via a certain mishandle of a multithreaded case involving a packet_do_bind unregister action followed by a packet_notifier register action resulting in use-after-free vulnerability.
References
access.redhat.com/errata/RHBA-2019:0327
access.redhat.com/errata/RHSA-2019:0163
access.redhat.com/errata/RHSA-2019:0188
access.redhat.com/errata/RHSA-2019:1170
access.redhat.com/errata/RHSA-2019:1190
access.redhat.com/security/updates/classification/#important
access.redhat.com/security/vulnerabilities/mds
blogs.securiteam.com/index.php/archives/3731
Related
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P