CVE-2019-19052
En bref Sévérité Non disponible EPSS EPSS 5.23 % · centile 92 (2026-10-28) État PUBLISHED Publiée 2019-11-18 Mise à jour 2024-08-05 Attribuée par mitre Statut NVD Modified Description A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 HIGH 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.16 < 3.16.79cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.17 < 4.4.201cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.5 < 4.9.201cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.10 < 4.14.154cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.15 < 4.19.84cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.20 < 5.3.11cpe:2.3:a:oracle:sd-wan_edge:8.2:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*cpe:2.3:a:netapp:aff_baseboard_management_controller:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:-:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:p1:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1:*:*:*:*:*:*:*cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.2:*:*:*:*:*:*:*cpe:2.3:a:netapp:fas\/aff_baseboard_management_controller:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:hci_baseboard_management_controller:h610s:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*+4 autres Produits affectés Produit Versions affected n/a
Références
Sources
