Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-12380

Опубликовано: 28 мая 2019
Источник: nvd
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

DISPUTED An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because “All the code touched by the referenced commit runs only at boot, before any user processes are started. Therefore, there is no possibility for an unprivileged user to control it.”.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 5.1.5 (включая)

EPSS

Процентиль: 21%
0.00068
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-388

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 6 лет назад

**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because “All the code touched by the referenced commit runs only at boot, before any user processes are started. Therefore, there is no possibility for an unprivileged user to control it.”.

CVSS3: 6.2
redhat
около 6 лет назад

**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because “All the code touched by the referenced commit runs only at boot, before any user processes are started. Therefore, there is no possibility for an unprivileged user to control it.”.

CVSS3: 5.5
debian
около 6 лет назад

**DISPUTED** An issue was discovered in the efi subsystem in the Linux ...

github
около 3 лет назад

An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prolog in arch/x86/platform/efi/efi_64.c mishandle memory allocation failures.

suse-cvrf
около 6 лет назад

Security update for the Linux Kernel

EPSS

Процентиль: 21%
0.00068
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-388