CVE-2019-15098

Published: Aug 16, 2019Modified: Nov 21, 2024

4.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

Affected (12)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Netapp: Active Iq Performance Analytics Services, Active Iq Unified Manager, Data Availability Services, Element Software · +2 more

Show all products

Linux: Linux Kernel · Canonical: Ubuntu Linux · Netapp: Active Iq Performance Analytics Services, Active Iq Unified Manager, Data Availability Services, Element Software · Opensuse: Leap · Debian: Debian Linux

1 product

1 product

4 products

Active Iq Performance Analytics Services

Active Iq Unified Manager

Data Availability Services

Element Software

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 5.2.9

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 19.04
Netapp Active Iq Performance Analytics Services	All versions
Netapp Active Iq Unified Manager	From 9.5
Netapp Data Availability Services	All versions
Netapp Element Software	All versions
Opensuse Leap	Version 15.0
Opensuse Leap	Version 15.1

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (34)

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.openwall.com/lists/oss-security/2019/09/27/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/09/27/2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/09/27/3

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lore.kernel.org/linux-wireless/20190804002905.11292-1-benquike%40gmail.com/T/#u

Source: cve@mitre.org

https://seclists.org/bugtraq/2019/Nov/11

Source: cve@mitre.org

Broken LinkMailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20190905-0002/

Source: cve@mitre.org

Third Party Advisory

https://support.f5.com/csp/article/K61214359

Source: cve@mitre.org

Third Party Advisory

https://support.f5.com/csp/article/K61214359?utm_source=f5support&amp%3Butm_medium=RSS

Source: cve@mitre.org

https://usn.ubuntu.com/4184-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4185-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4186-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4186-2/

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.openwall.com/lists/oss-security/2019/09/27/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/09/27/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/09/27/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lore.kernel.org/linux-wireless/20190804002905.11292-1-benquike%40gmail.com/T/#u

Source: af854a3a-2127-422b-91ae-364da2661108

https://seclists.org/bugtraq/2019/Nov/11

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkMailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20190905-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.f5.com/csp/article/K61214359

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.f5.com/csp/article/K61214359?utm_source=f5support&amp%3Butm_medium=RSS

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/4184-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4185-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4186-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4186-2/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.