Lucene search

Veracode Vulnerability DatabaseVERACODE:21048

HistoryAug 08, 2019 - 12:07 a.m.

Information Disclosure

2019-08-0800:07:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

JSON

kernel is vulnerable to information disclosure. The vulnerability exists through an Information leak in cdrom_ioctl_drive_status.

CPENameOperatorVersion
kerneleq3.10.0__514.16.1.el7
kerneleq3.10.0__957.12.2.el7
kerneleq3.10.0__693.2.1.el7
kerneleq3.10.0__514.21.2.el7
kerneleq3.10.0__862.6.3.el7
kerneleq3.10.0__693.17.1.el7
kerneleq3.10.0__957.12.1.el7
kerneleq3.10.0__862.14.4.el7
kerneleq3.10.0__862.2.3.el7
kerneleq3.10.0__957.21.2.el7

Name	Operator	Version
kernel	eq	3.10.0__514.16.1.el7
kernel	eq	3.10.0__957.12.2.el7
kernel	eq	3.10.0__693.2.1.el7
kernel	eq	3.10.0__514.21.2.el7
kernel	eq	3.10.0__862.6.3.el7
kernel	eq	3.10.0__693.17.1.el7
kernel	eq	3.10.0__957.12.1.el7
kernel	eq	3.10.0__862.14.4.el7
kernel	eq	3.10.0__862.2.3.el7
kernel	eq	3.10.0__957.21.2.el7

Rows per page:

1-10 of 841

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4

www.securityfocus.com/bid/105334

access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index

access.redhat.com/errata/RHSA-2019:2029

access.redhat.com/errata/RHSA-2019:2043

access.redhat.com/security/updates/classification/#important

bugzilla.redhat.com/show_bug.cgi?id=1335986

bugzilla.redhat.com/show_bug.cgi?id=1436351

bugzilla.redhat.com/show_bug.cgi?id=1537033

bugzilla.redhat.com/show_bug.cgi?id=1552203

bugzilla.redhat.com/show_bug.cgi?id=1577640

bugzilla.redhat.com/show_bug.cgi?id=1590228

bugzilla.redhat.com/show_bug.cgi?id=1593417

bugzilla.redhat.com/show_bug.cgi?id=1608955

bugzilla.redhat.com/show_bug.cgi?id=1609699

bugzilla.redhat.com/show_bug.cgi?id=1613056

bugzilla.redhat.com/show_bug.cgi?id=1616109

bugzilla.redhat.com/show_bug.cgi?id=1616425

bugzilla.redhat.com/show_bug.cgi?id=1622167

bugzilla.redhat.com/show_bug.cgi?id=1627563

bugzilla.redhat.com/show_bug.cgi?id=1628378

bugzilla.redhat.com/show_bug.cgi?id=1659146

bugzilla.redhat.com/show_bug.cgi?id=1665990

bugzilla.redhat.com/show_bug.cgi?id=1684780

bugzilla.redhat.com/show_bug.cgi?id=1693457

cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.18.6

github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4

lists.debian.org/debian-lts-announce/2018/10/msg00003.html

usn.ubuntu.com/3797-1/

usn.ubuntu.com/3797-2/

usn.ubuntu.com/3820-1/

usn.ubuntu.com/3820-2/

usn.ubuntu.com/3820-3/

usn.ubuntu.com/3822-1/

usn.ubuntu.com/3822-2/

www.debian.org/security/2018/dsa-4308

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:N/A:P

JSON

Related for VERACODE:21048