CVE-2019-15118

Published: Aug 16, 2019Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.

Affected (16)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · +2 more

Show all products

Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · Opensuse: Leap · Netapp: Active Iq Unified Manager, Data Availability Services, Hci Management Node, Solidfire, Solidfire Baseboard Management Controller Firmware, H410c Firmware

1 product

1 product

1 product

1 product

6 products

Active Iq Unified Manager

Data Availability Services

Hci Management Node

Solidfire Baseboard Management Controller Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Up to 5.2.9

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 19.04

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.0
Opensuse Leap	Version 15.1

Configuration E

4 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Data Availability Services	All versions
Netapp Hci Management Node	All versions
Netapp Solidfire	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Solidfire Baseboard Management Controller Firmware	All versions

Running on/with	Platform Versions
Netapp Solidfire Baseboard Management Controller	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Related CWEs

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (32)

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

Source: cve@mitre.org

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

Source: cve@mitre.org

Mailing List

http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

Source: cve@mitre.org

PatchThird Party AdvisoryVDB Entry

https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git/commit/?id=19bce474c45be69a284ecee660aa12d8f1e88f18

Source: cve@mitre.org

Mailing ListPatch

https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html

Source: cve@mitre.org

Mailing List

https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html

Source: cve@mitre.org

Mailing List

https://lore.kernel.org/lkml/20190815043554.16623-1-benquike%40gmail.com/

Source: cve@mitre.org

Mailing ListPatch

https://seclists.org/bugtraq/2019/Nov/11

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

https://seclists.org/bugtraq/2019/Sep/41

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20190905-0002/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4147-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4162-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4162-2/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4163-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4163-2/

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2019/dsa-4531

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryVDB Entry

https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git/commit/?id=19bce474c45be69a284ecee660aa12d8f1e88f18

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://lore.kernel.org/lkml/20190815043554.16623-1-benquike%40gmail.com/

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatch

https://seclists.org/bugtraq/2019/Nov/11

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

https://seclists.org/bugtraq/2019/Sep/41

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20190905-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4147-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4162-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4162-2/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4163-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4163-2/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2019/dsa-4531

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.