CVE-2019-12817

Опубликовано: 25 июн. 2019

Источник: nvd

CVSS3: 7

CVSS2: 6.9

EPSS Низкий

Описание

arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug where unrelated processes may be able to read/write to one another's virtual memory under certain conditions via an mmap above 512 TB. Only a subset of powerpc systems are affected.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/24/5
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/108884
Broken Link
https://access.redhat.com/errata/RHSA-2019:2703
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.15
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca72d88378b2f2444d3ec145dd442d449d3fefbc
Patch
Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTLN3KQYEEWWAJYA4BUYYDMWWXCJQNV2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSKLL2374YGFQR6LSVCFGTTCRGBTLAWZ/
https://seclists.org/bugtraq/2019/Aug/13
Mailing List
Third Party Advisory
https://support.f5.com/csp/article/K12876166
Third Party Advisory
https://support.f5.com/csp/article/K12876166?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/4031-1/
Third Party Advisory
https://www.debian.org/security/2019/dsa-4495
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/24/5
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/108884
Broken Link
https://access.redhat.com/errata/RHSA-2019:2703
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.15
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ca72d88378b2f2444d3ec145dd442d449d3fefbc
Patch
Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OTLN3KQYEEWWAJYA4BUYYDMWWXCJQNV2/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.1.15 (исключая)

Конфигурация 3

Одно из

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 5

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*

EPSS

Процентиль: 21%

0.00067

Низкий

7 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2019-12817

CVSS3: 7

ubuntu

около 6 лет назад

CVE-2019-12817

CVSS3: 7

redhat

около 6 лет назад

CVE-2019-12817

CVSS3: 7

debian

около 6 лет назад

arch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1. ...

SUSE-SU-2019:1769-1

suse-cvrf

около 6 лет назад

Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1)

GHSA-47g7-45f4-j83m

CVSS3: 7

github

около 3 лет назад

EPSS

Процентиль: 21%

0.00067

Низкий

7 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-787