Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-19770

Опубликовано: 12 дек. 2019
Источник: nvd
CVSS3: 8.2
CVSS2: 6.4
EPSS Низкий

Описание

In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия до 4.19.83 (включая)

EPSS

Процентиль: 77%
0.01123
Низкий

8.2 High

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.2
ubuntu
больше 5 лет назад

** DISPUTED ** In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace.

CVSS3: 5.1
redhat
больше 5 лет назад

In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux kernel developers dispute this issue as not being an issue with debugfs, instead this is an issue with misuse of debugfs within blktrace

CVSS3: 8.2
debian
больше 5 лет назад

In the Linux kernel 4.19.83, there is a use-after-free (read) in the d ...

CVSS3: 8.2
github
около 3 лет назад

In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file).

CVSS3: 8.2
fstec
больше 5 лет назад

Уязвимость функции debugfs_remove ядра операционной системы Linux, связанная с использованием области памяти после её освобождения, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании

EPSS

Процентиль: 77%
0.01123
Низкий

8.2 High

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-416