CVE-2019-3459
6.5
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD
Description
A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.
Affected (30)
Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Redhat: Codeready Linux Builder, Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux For Real Time, Enterprise Linux For Real Time For Nfv, Enterprise Linux For Real Time For Nfv Tus, Enterprise Linux For Real Time Tus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Tus, Enterprise Linux Workstation, Enterprise Mrg · +1 more
Show all products
Linux: Linux Kernel · Canonical: Ubuntu Linux · Redhat: Codeready Linux Builder, Enterprise Linux, Enterprise Linux Desktop, Enterprise Linux Eus, Enterprise Linux For Real Time, Enterprise Linux For Real Time For Nfv, Enterprise Linux For Real Time For Nfv Tus, Enterprise Linux For Real Time Tus, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Tus, Enterprise Linux Workstation, Enterprise Mrg · Debian: Debian Linux
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 5.1 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 14.04 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.0 | |
| Version 5.0 | |
| Version 7.0 | |
| Version 8.1 | |
| Version 7 | |
| Version 7 | |
| Version 8.2 | |
| Version 8.2 | |
| Version 7.0 | |
| Version 8.2 | |
| Version 8.2 | |
| Version 7.0 | |
| Version 2.0 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.0 |
References (38)
Source: security@debian.org
Mailing ListThird Party Advisory
Source: security@debian.org
Mailing ListThird Party Advisory
Source: security@debian.org
Mailing ListThird Party Advisory
Source: security@debian.org
Mailing ListThird Party Advisory
Source: security@debian.org
Mailing ListThird Party Advisory
Source: security@debian.org
Issue TrackingPatchThird Party Advisory
Source: security@debian.org
Issue TrackingMitigationThird Party Advisory
Source: security@debian.org
PatchVendor Advisory
Source: security@debian.org
Mailing ListThird Party Advisory
Source: security@debian.org
Mailing ListThird Party Advisory
Source: security@debian.org
Mailing ListThird Party Advisory
Source: security@debian.org
Source: security@debian.org
ExploitMailing ListThird Party Advisory
Source: security@debian.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingMitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Timeline
No history available yet.