← Back

CVE-2019-19050

nvd nist
Published: Nov 18, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.

Affected (21)

Show all products
Linux: Linux Kernel · Fedoraproject: Fedora · Canonical: Ubuntu Linux · Broadcom: Fabric Operating System · Netapp: Active Iq Unified Manager, Data Availability Services, E Series Santricity Os Controller, Hci Compute Node, Hci Management Node, Hci Storage Node, Solidfire, Steelstore Cloud Integrated Storage, Aff A700s Firmware, Fas8300 Firmware, Fas8700 Firmware, Aff A400 Firmware, H610s Firmware
Linux
1 product
Linux Kernel
Fedoraproject
1 product
Fedora
Canonical
1 product
Ubuntu Linux
Broadcom
1 product
Fabric Operating System
Netapp
13 products
Active Iq Unified Manager
Data Availability Services
E Series Santricity Os Controller
Hci Compute Node
Hci Management Node
Hci Storage Node
Solidfire
Steelstore Cloud Integrated Storage
Aff A700s Firmware
Fas8300 Firmware
Fas8700 Firmware
Aff A400 Firmware
H610s Firmware
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 4.20 to 5.3.16
Linux Kernel
From 5.4 to 5.4.3
Linux Kernel
Version 5.5 rc1
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 30
Fedora
Version 31
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 19.10
Configuration D
9 vulnerable
Vulnerable SoftwareAffected Versions
Fabric Operating System
All versions
Active Iq Unified Manager
All versions
Data Availability Services
All versions
E Series Santricity Os Controller
From 11.0.0 to 11.60.3
Hci Compute Node
All versions
Hci Management Node
All versions
Hci Storage Node
All versions
Solidfire
All versions
Steelstore Cloud Integrated Storage
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff A700s Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff A700s
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas8300 Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas8300
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas8700 Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas8700
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff A400 Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff A400
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H610s Firmware
All versions
Running on/withPlatform Versions
Netapp
H610s
All versions

Related CWEs

CWE-401
Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (14)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.