CVE-2019-19061

Published: Nov 18, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-9c0530e898f3.

Affected (39)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Broadcom: Brocade Fabric Operating System Firmware · +1 more

Show all products

Linux: Linux Kernel · Canonical: Ubuntu Linux · Broadcom: Brocade Fabric Operating System Firmware · Netapp: Active Iq Unified Manager, Aff Baseboard Management Controller, Cloud Backup, Data Availability Services, E Series Santricity Os Controller, Fas/aff Baseboard Management Controller, Hci Baseboard Management Controller, Solidfire, Enterprise Sds & Hci Storage Node, Solidfire & Hci Management Node, Steelstore Cloud Integrated Storage, Hci Compute Node Firmware, Solidfire Baseboard Management Controller Firmware

1 product

1 product

1 product

Brocade Fabric Operating System Firmware

Netapp

12 products

Active Iq Unified Manager

Aff Baseboard Management Controller

Cloud Backup

Data Availability Services

E Series Santricity Os Controller

Fas/aff Baseboard Management Controller

Hci Baseboard Management Controller

Solidfire, Enterprise Sds & Hci Storage Node

Solidfire & Hci Management Node

Steelstore Cloud Integrated Storage

Hci Compute Node Firmware

Solidfire Baseboard Management Controller Firmware

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 3.9 to 4.4.262
Linux Linux Kernel	From 4.10 to 4.14.192
Linux Linux Kernel	From 4.15 to 4.19.137
Linux Linux Kernel	From 4.20 to 5.3.9
Linux Linux Kernel	From 4.5 to 4.9.262

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 19.10

Configuration C

28 vulnerable

Vulnerable Software	Affected Versions
Broadcom Brocade Fabric Operating System Firmware	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Aff Baseboard Management Controller	All versions
Netapp Cloud Backup	All versions
Netapp Data Availability Services	All versions
Netapp E Series Santricity Os Controller	Version 11.0.0
Netapp E Series Santricity Os Controller	Version 11.0
Netapp E Series Santricity Os Controller	Version 11.20
Netapp E Series Santricity Os Controller	Version 11.25
Netapp E Series Santricity Os Controller	Version 11.30.5r3
Netapp E Series Santricity Os Controller	Version 11.30
Netapp E Series Santricity Os Controller	Version 11.40.3r2
Netapp E Series Santricity Os Controller	Version 11.40.5
Netapp E Series Santricity Os Controller	Version 11.40
Netapp E Series Santricity Os Controller	Version 11.50.1
Netapp E Series Santricity Os Controller	Version 11.50.2
Netapp E Series Santricity Os Controller	Version 11.50.2 p1
Netapp E Series Santricity Os Controller	Version 11.60.0
Netapp E Series Santricity Os Controller	Version 11.60.1
Netapp E Series Santricity Os Controller	Version 11.60.3
Netapp E Series Santricity Os Controller	Version 11.60
Netapp E Series Santricity Os Controller	Version 11.70.1
Netapp E Series Santricity Os Controller	Version 11.70.2
Netapp Fas/aff Baseboard Management Controller	All versions
Netapp Hci Baseboard Management Controller	Version h610s
Netapp Solidfire, Enterprise Sds & Hci Storage Node	All versions
Netapp Solidfire & Hci Management Node	All versions
Netapp Steelstore Cloud Integrated Storage	All versions