← Back

CVE-2019-19816

nvd nist
Published: Dec 17, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.

Affected (19)

Show all products
Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · Netapp: Active Iq Unified Manager, Data Availability Services, Hci Management Node, Solidfire, Steelstore Cloud Integrated Storage, Aff A700s Firmware, Fas8300 Firmware, Fas8700 Firmware, Aff A400 Firmware, H610s Firmware
Linux
1 product
Linux Kernel
Canonical
1 product
Ubuntu Linux
Debian
1 product
Debian Linux
Netapp
10 products
Active Iq Unified Manager
Data Availability Services
Hci Management Node
Solidfire
Steelstore Cloud Integrated Storage
Aff A700s Firmware
Fas8300 Firmware
Fas8700 Firmware
Aff A400 Firmware
H610s Firmware
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 2.6.12 to 4.4.247
Linux Kernel
From 4.10 to 4.14.210
Linux Kernel
From 4.15 to 4.19.137
Linux Kernel
From 4.20 to 5.2
Linux Kernel
From 4.5 to 4.9.247
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 9.0
Configuration D
5 vulnerable
Vulnerable SoftwareAffected Versions
Active Iq Unified Manager
From 9.5
Data Availability Services
All versions
Hci Management Node
All versions
Solidfire
All versions
Steelstore Cloud Integrated Storage
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff A700s Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff A700s
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas8300 Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas8300
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas8700 Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas8700
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff A400 Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff A400
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
H610s Firmware
All versions
Running on/withPlatform Versions
Netapp
H610s
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (12)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.