CVE-2019-3900

Published: Apr 25, 2019Modified: Jun 17, 2026

7.7

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability: 3.1 / Impact: 4.0

Source: NVD

Description

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.

Affected (26)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux · Debian: Debian Linux · +4 more

Show all products

1 product

1 product

1 product

1 product

8 products

Active Iq Unified Manager For Vmware Vsphere

Hci Management Node

Snapprotect

Solidfire

Storage Replication Adapter For Clustered Data Ontap For Vmware Vsphere

Vasa Provider For Clustered Data Ontap

Virtual Storage Console For Vmware Vsphere

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.34 to 3.16.72
Linux Linux Kernel	From 3.17 to 4.4.191
Linux Linux Kernel	From 4.10 to 4.14.133
Linux Linux Kernel	From 4.15 to 4.19.64
Linux Linux Kernel	From 4.20 to 5.2
Linux Linux Kernel	From 4.5 to 4.9.190

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 19.04

Configuration F

7 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager For Vmware Vsphere	From 9.5
Netapp Hci Management Node	All versions
Netapp Snapprotect	All versions
Netapp Solidfire	All versions
Netapp Storage Replication Adapter For Clustered Data Ontap For Vmware Vsphere	From 7.2
Netapp Vasa Provider For Clustered Data Ontap	From 7.2
Netapp Virtual Storage Console For Vmware Vsphere	From 7.2

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Cn1610 Firmware	All versions

Running on/with	Platform Versions
Netapp Cn1610	All versions

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Sd Wan Edge	Version 8.2

Configuration I

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 28
Fedoraproject Fedora	Version 29
Fedoraproject Fedora	Version 30

Related CWEs

CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (58)

http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/108076

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2019:1973

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2029

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2043

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3220

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3309

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3517

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3836

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3967

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:4058

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0204

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3900

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYTZH6QCNITK7353S6RCRT2PQHZSDPXD/

Source: secalert@redhat.com

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RI3WXXM5URTZSR3RVEKO6MDXDFIKTZ5R/

Source: secalert@redhat.com

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TOFNJA5NNVXQ6AV6KGZB677JIVXAMJHT/

Source: secalert@redhat.com

Mailing List

https://seclists.org/bugtraq/2019/Aug/18

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Nov/11

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

https://security.netapp.com/advisory/ntap-20190517-0005/

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/4114-1/

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/4115-1/

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/4116-1/

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/4117-1/

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/4118-1/

Source: secalert@redhat.com

Third Party Advisory

https://www.debian.org/security/2019/dsa-4497

Source: secalert@redhat.com

Third Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

Source: secalert@redhat.com

Third Party Advisory

https://www.spinics.net/lists/kernel/msg3111012.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html