CVE-2019-20811

Опубликовано: 03 июн. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.

Ссылки

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6
Release Notes
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9e
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
Mailing List
Third Party Advisory
https://usn.ubuntu.com/4527-1/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4698
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6
Release Notes
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a3e23f719f5c4a38ffb3d30c8d7632a4ed8ccd9e
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html
Mailing List
Third Party Advisory
https://usn.ubuntu.com/4527-1/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4698
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.0.6 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

EPSS

Процентиль: 7%

0.00032

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2019-20811

CVSS3: 5.5

ubuntu

около 5 лет назад

An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.

CVE-2019-20811

CVSS3: 3.3

redhat

больше 6 лет назад

An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.

CVE-2019-20811

CVSS3: 5.5

debian

около 5 лет назад

An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_ ...

GHSA-9758-m2fm-98xg

CVSS3: 5.5

github

около 3 лет назад

An issue was discovered in the Linux kernel before 5.0.6. In rx_queue_add_kobject() and netdev_queue_add_kobject() in net/core/net-sysfs.c, a reference count is mishandled, aka CID-a3e23f719f5c.

BDU:2020-03025

CVSS3: 5.5

fstec

больше 6 лет назад

Уязвимость функций rx_queue_add_kobject() и netdev_queue_add_kobject() (net/core/net-sysfs.c) ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 7%

0.00032

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

NVD-CWE-Other