CVE-2019-19053

A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.

CVSS v3 7.5 HIGH
CVSS v2.0 7.8 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
https://github.com/torvalds/linux/commit/bbe692e349e2a1edf3fe0a29a0e05899c9c94d51	Patch Third Party Advisory
https://security.netapp.com/advisory/ntap-20191205-0001/	Third Party Advisory
https://usn.ubuntu.com/4300-1/	Third Party Advisory
https://usn.ubuntu.com/4301-1/	Third Party Advisory
https://github.com/torvalds/linux/commit/bbe692e349e2a1edf3fe0a29a0e05899c9c94d51	Patch Third Party Advisory
https://security.netapp.com/advisory/ntap-20191205-0001/	Third Party Advisory
https://usn.ubuntu.com/4300-1/	Third Party Advisory
https://usn.ubuntu.com/4301-1/	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:19.10:::::::*

Configuration 3 (hide)

OR	cpe:2.3:a:netapp:active_iq_unified_manager:-:::::vmware_vsphere::
	cpe:2.3:a:netapp:aff_baseboard_management_controller:-:::::::*
	cpe:2.3:a:netapp:cloud_backup:-:::::::*
	cpe:2.3:a:netapp:data_availability_services:-:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:-::::::
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:p1::::::
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.2:::::::*
	cpe:2.3:a:netapp:fas\/aff_baseboard_management_controller:-:::::::*
	cpe:2.3:a:netapp:hci_baseboard_management_controller:h610s:::::::*
	cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:::::::*
	cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:::::::*
	cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:::::::*
	cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:::::::*

Configuration 4 (hide)

AND

cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

History

21 Nov 2024, 04:34

Type	Values Removed	Values Added
References	~~() https://github.com/torvalds/linux/commit/bbe692e349e2a1edf3fe0a29a0e05899c9c94d51 - Patch, Third Party Advisory~~	() https://github.com/torvalds/linux/commit/bbe692e349e2a1edf3fe0a29a0e05899c9c94d51 - Patch, Third Party Advisory
References	~~() https://security.netapp.com/advisory/ntap-20191205-0001/ - Third Party Advisory~~	() https://security.netapp.com/advisory/ntap-20191205-0001/ - Third Party Advisory
References	~~() https://usn.ubuntu.com/4300-1/ - Third Party Advisory~~	() https://usn.ubuntu.com/4300-1/ - Third Party Advisory
References	~~() https://usn.ubuntu.com/4301-1/ - Third Party Advisory~~	() https://usn.ubuntu.com/4301-1/ - Third Party Advisory

Information

Published : 2019-11-18 06:15

Updated : 2024-11-21 04:34

NVD link : CVE-2019-19053

Mitre link : CVE-2019-19053

CVE.ORG link : CVE-2019-19053

JSON object : View

Products Affected

netapp

aff_baseboard_management_controller
cloud_backup
solidfire_\&_hci_management_node
active_iq_unified_manager
solidfire\,_enterprise_sds_\&_hci_storage_node
hci_compute_node_firmware
fas\/aff_baseboard_management_controller
hci_compute_node
solidfire_baseboard_management_controller_firmware
hci_baseboard_management_controller
steelstore_cloud_integrated_storage
solidfire_baseboard_management_controller
data_availability_services
e-series_santricity_os_controller

linux

linux_kernel

canonical

ubuntu_linux

broadcom

brocade_fabric_operating_system_firmware

CWE

CWE-401

Missing Release of Memory after Effective Lifetime

{"id": "CVE-2019-19053", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-11-18T06:15:11.903", "references": [{"url": "https://github.com/torvalds/linux/commit/bbe692e349e2a1edf3fe0a29a0e05899c9c94d51", "tags": ["Patch", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://security.netapp.com/advisory/ntap-20191205-0001/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://usn.ubuntu.com/4300-1/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://usn.ubuntu.com/4301-1/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/torvalds/linux/commit/bbe692e349e2a1edf3fe0a29a0e05899c9c94d51", "tags": ["Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.netapp.com/advisory/ntap-20191205-0001/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usn.ubuntu.com/4300-1/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usn.ubuntu.com/4301-1/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-401"}]}], "descriptions": [{"lang": "en", "value": "A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2."}, {"lang": "es", "value": "Una p\u00e9rdida de memoria en la funci\u00f3n rpmsg_eptdev_write_iter() en el archivo drivers/rpmsg/rpmsg_char.c en el kernel de Linux versiones hasta la versi\u00f3n 5.3.11, permite a atacantes causar una denegaci\u00f3n de servicio (consumo de memoria) al desencadenar fallos de la funci\u00f3n copy_from_iter_full(), tambi\u00e9n se conoce como CID-bbe692e349e2."}], "lastModified": "2024-11-21T04:34:04.910", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81529934-E2E4-4EDA-8787-54E9CB8B046D", "versionEndExcluding": "5.4.12", "versionStartIncluding": "4.20"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A31C8344-3E02-4EB8-8BD8-4C84B7959624"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*", "vulnerable": true, "matchCriteriaId": "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"}, {"criteria": "cpe:2.3:a:netapp:aff_baseboard_management_controller:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C0ADE5D-F91D-4E0D-B6C5-3511B19665F1"}, {"criteria": "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"}, {"criteria": "cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EF46487-B64A-454E-AECC-D74B83170ACD"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AFF1109-26F3-43A5-A4CB-0F169FDBC0DE"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AF71C49-ADEF-4EE2-802C-6159ADD51355"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3BC6E59-2134-4A28-AAD2-77C8AE236BCF"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24377899-5389-4BDC-AC82-0E4186F4DE53"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23FE83DE-AE7C-4313-88E3-886110C31302"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "490B327B-AC20-419B-BB76-8AB6971304BB"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8DCE2754-7A9E-4B3B-91D1-DCF90C1BABE5"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CA74E8B-51E2-4A7C-8A98-0583D31134A6"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B64AB37-A1D9-4163-A51B-4C780361F1F1"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BE9C9D7-9CED-4184-A190-1024A6FB8C82"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B73D4C3C-A511-4E14-B19F-91F561ACB1B8"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C47D72C-9B6B-4E52-AF0E-56AD58E4A930"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "039C3790-5AA2-4895-AEAE-CC84A71DB907"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4592238-D1F2-43D6-9BAB-2F63ECF9C965"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BA78068-80E9-4E49-9056-88EAB7E3682C"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "092F366C-E8B0-4BE5-B106-0B7A73B08D34"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7992E92-B159-4810-B895-01A9B944058A"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BDD7AAB-2BF3-4E8C-BEE2-5217E2926C11"}, {"criteria": "cpe:2.3:a:netapp:fas\\/aff_baseboard_management_controller:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66EEA3CA-8CC7-4F0B-8204-6132D4114873"}, {"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h610s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE7C6010-F736-4BDA-9E3B-C4370BBFA149"}, {"criteria": "cpe:2.3:a:netapp:solidfire\\,_enterprise_sds_\\&_hci_storage_node:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DAA3919C-B2B1-4CB5-BA76-7A079AAFFC52"}, {"criteria": "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6D700C5-F67F-4FFB-BE69-D524592A3D2E"}, {"criteria": "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"}, {"criteria": "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2748912-FC54-47F6-8C0C-B96784765B8E"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "090AA6F4-4404-4E26-82AB-C3A22636F276"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F921BC85-568E-4B69-A3CD-CF75C76672F1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AD7447BC-F315-4298-A822-549942FC118B"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}

7.5 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8 /10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

JSON object

Attach tags to CVE-2019-19053

7.5^/10

7.8^/10

Attach tags to `CVE-2019-19053`