CVE-2019-14898

Опубликовано: 08 мая 2020

Источник: ubuntu

Приоритет: medium

EPSS Низкий

CVSS2: 6.9

CVSS3: 7

Описание

The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local user could use this flaw to obtain sensitive information, cause a denial of service, or possibly have other unspecified impacts by triggering a race condition with mmget_not_zero or get_task_mm calls.

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	not-affected	RHEL-7 specific issue
disco	ignored	end of life
eoan	not-affected	RHEL-7 specific issue
esm-infra-legacy/trusty	ignored	was not-affected (RHEL-7 specific issue) ESM criteria
esm-infra/bionic	not-affected	RHEL-7 specific issue
esm-infra/xenial	not-affected	RHEL-7 specific issue
precise/esm	ignored	end of life, was not-affected
trusty	ignored	end of standard support
trusty/esm	ignored	end of ESM support, was ignored [was not-affected (RHEL-7 specific issue) ESM criteria]

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	not-affected	RHEL-7 specific issue
disco	ignored	end of life
eoan	not-affected	RHEL-7 specific issue
esm-infra-legacy/trusty	ignored	was not-affected (RHEL-7 specific issue) ESM criteria
esm-infra/bionic	not-affected	RHEL-7 specific issue
esm-infra/xenial	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	ignored	end of ESM support, was ignored [was not-affected (RHEL-7 specific issue) ESM criteria]

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/xenial	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	not-affected	RHEL-7 specific issue
disco	ignored	end of life
eoan	not-affected	RHEL-7 specific issue
esm-infra-legacy/trusty	ignored	was not-affected (RHEL-7 specific issue) ESM criteria
esm-infra/bionic	not-affected	RHEL-7 specific issue
esm-infra/xenial	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	ignored	end of ESM support, was ignored [was not-affected (RHEL-7 specific issue) ESM criteria]

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	not-affected	RHEL-7 specific issue
disco	ignored	end of life
eoan	not-affected	RHEL-7 specific issue
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
esm-infra/xenial	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
esm-infra/xenial	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	ignored	end of standard support, was not-affected
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	ignored	end of life, was not-affected
esm-infra/xenial	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	not-affected	RHEL-7 specific issue
disco	ignored	end of life
eoan	not-affected	RHEL-7 specific issue
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
esm-infra/xenial	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
precise/esm	ignored	end of life, was not-affected
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	ignored	was not-affected (RHEL-7 specific issue) ESM criteria
precise/esm	DNE
trusty	ignored	end of standard support
trusty/esm	ignored	end of ESM support, was ignored [was not-affected (RHEL-7 specific issue) ESM criteria]
upstream	not-affected	RHEL-7 specific issue
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	ignored	end of life
eoan	not-affected	RHEL-7 specific issue
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue

Показывать по

Релиз	Статус	Примечание
bionic	DNE
devel	not-affected	RHEL-7 specific issue
eoan	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	ignored	end of life
eoan	not-affected	RHEL-7 specific issue
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	not-affected	RHEL-7 specific issue
disco	ignored	end of life
eoan	not-affected	RHEL-7 specific issue
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
esm-infra/xenial	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
esm-infra/bionic	not-affected	RHEL-7 specific issue
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	not-affected	RHEL-7 specific issue
disco	ignored	end of life
eoan	not-affected	RHEL-7 specific issue
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue
xenial	not-affected	RHEL-7 specific issue

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
eoan	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue
xenial	DNE

Показывать по

Релиз	Статус	Примечание
bionic	not-affected	RHEL-7 specific issue
devel	DNE
disco	ignored	end of life
eoan	DNE
esm-infra-legacy/trusty	DNE
precise/esm	DNE
trusty	DNE
trusty/esm	DNE
upstream	not-affected	RHEL-7 specific issue
xenial	not-affected	RHEL-7 specific issue

Показывать по

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2019-14898

EPSS

Процентиль: 10%

0.00038

Низкий

6.9 Medium

CVSS2

7 High

CVSS3

Связанные уязвимости

CVE-2019-14898

CVSS3: 7

redhat

больше 5 лет назад

CVE-2019-14898

CVSS3: 7

nvd

около 5 лет назад

CVE-2019-14898

CVSS3: 7

debian

около 5 лет назад

The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 w ...

GHSA-8qqf-qhmm-w3cm

CVSS3: 7

github

около 3 лет назад

BDU:2020-02253

CVSS3: 7

fstec

около 6 лет назад

Уязвимость компонентов mmget_not_zero()/get_task_mm() ядра операционной системы Linux, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании

EPSS

Процентиль: 10%

0.00038

Низкий

6.9 Medium

CVSS2

7 High

CVSS3

CVE-2019-14898

Описание

Пакет linux

Пакет linux-aws

Пакет linux-aws-5.0

Пакет linux-aws-hwe

Пакет linux-azure

Пакет linux-azure-edge

Пакет linux-gcp

Пакет linux-gcp-5.3

Пакет linux-gcp-edge

Пакет linux-gke-4.15

Пакет linux-gke-5.0

Пакет linux-hwe

Пакет linux-hwe-edge

Пакет linux-kvm

Пакет linux-lts-trusty

Пакет linux-lts-xenial

Пакет linux-oem

Пакет linux-oem-5.4

Пакет linux-oem-osp1

Пакет linux-oracle

Пакет linux-oracle-5.0

Пакет linux-raspi2

Пакет linux-raspi2-5.3

Пакет linux-snapdragon

Ссылки на источники

Связанные уязвимости