Vulnerability-Lookup

RHSA-2019:1873

Vulnerability from csaf_opensuse - Published: 2019-07-29 00:00 - Updated: 2026-09-20 11:03

Summary

security update for kernel

Severity

Important

Notes

Title of the patch: security update for kernel

Description of the patch: This security update provides a functional equivalent of RHSA-2019:1873. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2019:1873.

Patchnames: RHSA-2019:1873

CVE-2018-16871

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 13 products

Product	Version	Remediation
Unresolved product id: SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix
Unresolved product id: SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2018-16884

7 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2018-16871

Threats

Impact important

CVE-2019-11085

8.8 (High)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 13 products, the same list as for CVE-2018-16871

Threats

Impact moderate

CVE-2019-11811

3.9 (Low)


                
                  CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 13 products, the same list as for CVE-2018-16871

Threats

Impact low

References

17 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/r…	self
https://www.suse.com/security/cve/CVE-2018-16871/	self
https://www.suse.com/security/cve/CVE-2018-16884/	self
https://www.suse.com/security/cve/CVE-2019-11085/	self
https://www.suse.com/security/cve/CVE-2019-11811/	self
https://www.suse.com/security/cve/CVE-2018-16871	external
https://bugzilla.suse.com/1137103	external
https://bugzilla.suse.com/1156320	external
https://www.suse.com/security/cve/CVE-2018-16884	external
https://bugzilla.suse.com/1119946	external
https://bugzilla.suse.com/1119947	external
https://www.suse.com/security/cve/CVE-2019-11085	external
https://bugzilla.suse.com/1135278	external
https://bugzilla.suse.com/1135280	external
https://www.suse.com/security/cve/CVE-2019-11811	external
https://bugzilla.suse.com/1134397	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2019:1873.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2019:1873.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2019:1873",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2019_1873.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16871 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16871/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-16884 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-16884/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11085 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11085/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-11811 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-11811/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-20T11:03:34Z",
      "generator": {
        "date": "2019-07-29T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2019:1873",
      "initial_release_date": "2019-07-29T00:00:00Z",
      "revision_history": [
        {
          "date": "2019-07-29T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:03:34Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
                "product": {
                  "name": "kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
                  "product_id": "kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-957.27.2.el7?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:3.10.0-957.27.2.el7.noarch",
                "product": {
                  "name": "kernel-doc-0:3.10.0-957.27.2.el7.noarch",
                  "product_id": "kernel-doc-0:3.10.0-957.27.2.el7.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@3.10.0-957.27.2.el7?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "bpftool-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "bpftool-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/bpftool@3.10.0-957.27.2.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-957.27.2.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "kernel-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "kernel-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@3.10.0-957.27.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@3.10.0-957.27.2.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-957.27.2.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-957.27.2.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-957.27.2.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@3.10.0-957.27.2.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-957.27.2.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@3.10.0-957.27.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@3.10.0-957.27.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-957.27.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-957.27.2.el7?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "perf-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "perf-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@3.10.0-957.27.2.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-957.27.2.el7.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python-perf-0:3.10.0-957.27.2.el7.x86_64",
                "product": {
                  "name": "python-perf-0:3.10.0-957.27.2.el7.x86_64",
                  "product_id": "python-perf-0:3.10.0-957.27.2.el7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python-perf@3.10.0-957.27.2.el7?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 7",
                "product": {
                  "name": "SUSE Liberty Linux 7",
                  "product_id": "SUSE Liberty Linux 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "bpftool-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "kernel-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch"
        },
        "product_reference": "kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:3.10.0-957.27.2.el7.noarch as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch"
        },
        "product_reference": "kernel-doc-0:3.10.0-957.27.2.el7.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "perf-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-perf-0:3.10.0-957.27.2.el7.x86_64 as component of SUSE Liberty Linux 7",
          "product_id": "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
        },
        "product_reference": "python-perf-0:3.10.0-957.27.2.el7.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-16871",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16871"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16871",
          "url": "https://www.suse.com/security/cve/CVE-2018-16871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1137103 for CVE-2018-16871",
          "url": "https://bugzilla.suse.com/1137103"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1156320 for CVE-2018-16871",
          "url": "https://bugzilla.suse.com/1156320"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-16871"
    },
    {
      "cve": "CVE-2018-16884",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-16884"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the Linux kernel\u0027s NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-16884",
          "url": "https://www.suse.com/security/cve/CVE-2018-16884"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1119946 for CVE-2018-16884",
          "url": "https://bugzilla.suse.com/1119946"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1119947 for CVE-2018-16884",
          "url": "https://bugzilla.suse.com/1119947"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-29T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-16884"
    },
    {
      "cve": "CVE-2019-11085",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11085"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11085",
          "url": "https://www.suse.com/security/cve/CVE-2019-11085"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135278 for CVE-2019-11085",
          "url": "https://bugzilla.suse.com/1135278"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1135280 for CVE-2019-11085",
          "url": "https://bugzilla.suse.com/1135280"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-29T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-11085"
    },
    {
      "cve": "CVE-2019-11811",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-11811"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module is removed, related to drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
          "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
          "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-11811",
          "url": "https://www.suse.com/security/cve/CVE-2019-11811"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1134397 for CVE-2019-11811",
          "url": "https://bugzilla.suse.com/1134397"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Liberty Linux 7:bpftool-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-abi-whitelists-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-debug-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-debug-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-doc-0:3.10.0-957.27.2.el7.noarch",
            "SUSE Liberty Linux 7:kernel-headers-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:kernel-tools-libs-devel-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:perf-0:3.10.0-957.27.2.el7.x86_64",
            "SUSE Liberty Linux 7:python-perf-0:3.10.0-957.27.2.el7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-07-29T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-11811"
    }
  ]
}

CVE-2018-16871 (GCVE-0-2018-16871)

Vulnerability from cvelistv5 – Published: 2019-07-30 16:19 – Updated: 2024-08-05 10:32

Summary

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-476

Assigner

redhat redhat root

References

7 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2019:2696	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2730	vendor-advisoryx_refsource_REDHAT
https://support.f5.com/csp/article/K18657134	x_refsource_CONFIRM
https://support.f5.com/csp/article/K18657134?utm_…	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2020:0740	vendor-advisoryx_refsource_REDHAT
https://security.netapp.com/advisory/ntap-2021100…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Red Hat	kernel:	Affected: all 3.x, all 4.x up to 4.20

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:32:54.042Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16871"
          },
          {
            "name": "RHSA-2019:2696",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2696"
          },
          {
            "name": "RHSA-2019:2730",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2730"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K18657134"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K18657134?utm_source=f5support\u0026amp%3Butm_medium=RSS"
          },
          {
            "name": "RHSA-2020:0740",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0740"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20211004-0002/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel:",
          "vendor": "Red Hat",
          "versions": [
            {
              "status": "affected",
              "version": "all 3.x, all 4.x up to 4.20"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel\u0027s NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-04T18:06:18.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16871"
        },
        {
          "name": "RHSA-2019:2696",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2696"
        },
        {
          "name": "RHSA-2019:2730",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2730"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K18657134"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K18657134?utm_source=f5support\u0026amp%3Butm_medium=RSS"
        },
        {
          "name": "RHSA-2020:0740",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0740"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20211004-0002/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-16871",
    "datePublished": "2019-07-30T16:19:25.000Z",
    "dateReserved": "2018-09-11T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:32:54.042Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-16884 (GCVE-0-2018-16884)

Vulnerability from cvelistv5 – Published: 2018-12-18 22:00 – Updated: 2024-08-05 10:32

Summary

A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out.

Severity

6.5 (Medium)


                        
                          CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H

CWE

CWE-416

Assigner

redhat redhat root

References

22 references

URL	Tags
http://www.securityfocus.com/bid/106253	vdb-entryx_refsource_BID
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3932-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3932-2/	vendor-advisoryx_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2019…	mailing-listx_refsource_MLIST
https://usn.ubuntu.com/3981-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3980-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3980-2/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/3981-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:1873	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1891	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2696	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2730	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3309	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3517	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0204	vendor-advisoryx_refsource_REDHAT
https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…	x_refsource_CONFIRM
https://patchwork.kernel.org/patch/10733769/	x_refsource_CONFIRM
https://patchwork.kernel.org/cover/10733767/	x_refsource_CONFIRM
https://support.f5.com/csp/article/K21430012	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
[UNKNOWN]	kernel:	Affected: n/a

Date Public

2018-12-18 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T10:32:54.149Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "106253",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/106253"
          },
          {
            "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
          },
          {
            "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
          },
          {
            "name": "USN-3932-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3932-1/"
          },
          {
            "name": "USN-3932-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3932-2/"
          },
          {
            "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
          },
          {
            "name": "USN-3981-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3981-1/"
          },
          {
            "name": "USN-3980-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3980-1/"
          },
          {
            "name": "USN-3980-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3980-2/"
          },
          {
            "name": "USN-3981-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3981-2/"
          },
          {
            "name": "RHSA-2019:1873",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1873"
          },
          {
            "name": "RHSA-2019:1891",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1891"
          },
          {
            "name": "RHSA-2019:2696",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2696"
          },
          {
            "name": "RHSA-2019:2730",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2730"
          },
          {
            "name": "RHSA-2019:3309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3309"
          },
          {
            "name": "RHSA-2019:3517",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3517"
          },
          {
            "name": "RHSA-2020:0204",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0204"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16884"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://patchwork.kernel.org/patch/10733769/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://patchwork.kernel.org/cover/10733767/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K21430012"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "kernel:",
          "vendor": "[UNKNOWN]",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-12-18T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the Linux kernel\u0027s NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-14T17:20:04.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "106253",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/106253"
        },
        {
          "name": "[debian-lts-announce] 20190327 [SECURITY] [DLA 1731-1] linux security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html"
        },
        {
          "name": "[debian-lts-announce] 20190401 [SECURITY] [DLA 1731-2] linux regression update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html"
        },
        {
          "name": "USN-3932-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3932-1/"
        },
        {
          "name": "USN-3932-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3932-2/"
        },
        {
          "name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
        },
        {
          "name": "USN-3981-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3981-1/"
        },
        {
          "name": "USN-3980-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3980-1/"
        },
        {
          "name": "USN-3980-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3980-2/"
        },
        {
          "name": "USN-3981-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3981-2/"
        },
        {
          "name": "RHSA-2019:1873",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1873"
        },
        {
          "name": "RHSA-2019:1891",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1891"
        },
        {
          "name": "RHSA-2019:2696",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2696"
        },
        {
          "name": "RHSA-2019:2730",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2730"
        },
        {
          "name": "RHSA-2019:3309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3309"
        },
        {
          "name": "RHSA-2019:3517",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3517"
        },
        {
          "name": "RHSA-2020:0204",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0204"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuApr2021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16884"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://patchwork.kernel.org/patch/10733769/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://patchwork.kernel.org/cover/10733767/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K21430012"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2018-16884",
    "datePublished": "2018-12-18T22:00:00.000Z",
    "dateReserved": "2018-09-11T00:00:00.000Z",
    "dateUpdated": "2024-08-05T10:32:54.149Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11085 (GCVE-0-2019-11085)

Vulnerability from cvelistv5 – Published: 2019-05-17 15:41 – Updated: 2024-08-04 22:40

Summary

Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Severity

No CVSS data available.

CWE

Escalation of Privilege

Assigner

intel mitre root

References

15 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://support.f5.com/csp/article/K09376613	x_refsource_CONFIRM
http://www.securityfocus.com/bid/108488	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://usn.ubuntu.com/4068-1/	vendor-advisoryx_refsource_UBUNTU
https://usn.ubuntu.com/4068-2/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2019:1873	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1891	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1959	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1971	vendor-advisoryx_refsource_REDHAT
https://usn.ubuntu.com/4118-1/	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/errata/RHSA-2020:0543	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0592	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0609	vendor-advisoryx_refsource_REDHAT

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) i915 Graphics for Linux	Affected: Versions before 5.0.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:40:16.359Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00249.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K09376613"
          },
          {
            "name": "108488",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/108488"
          },
          {
            "name": "openSUSE-SU-2019:1479",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
          },
          {
            "name": "openSUSE-SU-2019:1579",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
          },
          {
            "name": "USN-4068-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4068-1/"
          },
          {
            "name": "USN-4068-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4068-2/"
          },
          {
            "name": "RHSA-2019:1873",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1873"
          },
          {
            "name": "RHSA-2019:1891",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1891"
          },
          {
            "name": "RHSA-2019:1959",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1959"
          },
          {
            "name": "RHSA-2019:1971",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1971"
          },
          {
            "name": "USN-4118-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4118-1/"
          },
          {
            "name": "RHSA-2020:0543",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0543"
          },
          {
            "name": "RHSA-2020:0592",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0592"
          },
          {
            "name": "RHSA-2020:0609",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0609"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) i915 Graphics for Linux",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Versions before 5.0."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Escalation of Privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-02-26T12:06:03.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00249.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K09376613"
        },
        {
          "name": "108488",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/108488"
        },
        {
          "name": "openSUSE-SU-2019:1479",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
        },
        {
          "name": "openSUSE-SU-2019:1579",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
        },
        {
          "name": "USN-4068-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4068-1/"
        },
        {
          "name": "USN-4068-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4068-2/"
        },
        {
          "name": "RHSA-2019:1873",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1873"
        },
        {
          "name": "RHSA-2019:1891",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1891"
        },
        {
          "name": "RHSA-2019:1959",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1959"
        },
        {
          "name": "RHSA-2019:1971",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1971"
        },
        {
          "name": "USN-4118-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4118-1/"
        },
        {
          "name": "RHSA-2020:0543",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0543"
        },
        {
          "name": "RHSA-2020:0592",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0592"
        },
        {
          "name": "RHSA-2020:0609",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0609"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2019-11085",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) i915 Graphics for Linux",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Versions before 5.0."
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Escalation of Privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00249.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00249.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K09376613",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K09376613"
            },
            {
              "name": "108488",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/108488"
            },
            {
              "name": "openSUSE-SU-2019:1479",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
            },
            {
              "name": "openSUSE-SU-2019:1579",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
            },
            {
              "name": "USN-4068-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4068-1/"
            },
            {
              "name": "USN-4068-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4068-2/"
            },
            {
              "name": "RHSA-2019:1873",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1873"
            },
            {
              "name": "RHSA-2019:1891",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1891"
            },
            {
              "name": "RHSA-2019:1959",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1959"
            },
            {
              "name": "RHSA-2019:1971",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1971"
            },
            {
              "name": "USN-4118-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4118-1/"
            },
            {
              "name": "RHSA-2020:0543",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0543"
            },
            {
              "name": "RHSA-2020:0592",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0592"
            },
            {
              "name": "RHSA-2020:0609",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0609"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2019-11085",
    "datePublished": "2019-05-17T15:41:37.000Z",
    "dateReserved": "2019-04-11T00:00:00.000Z",
    "dateUpdated": "2024-08-04T22:40:16.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-11811 (GCVE-0-2019-11811)

Vulnerability from cvelistv5 – Published: 2019-05-07 13:24 – Updated: 2024-08-04 23:03

Summary

An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module is removed, related to drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

14 references

URL	Tags
https://cdn.kernel.org/pub/linux/kernel/v5.x/Chan…	x_refsource_MISC
https://github.com/torvalds/linux/commit/401e7e88…	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torv…	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://support.f5.com/csp/article/K01512680	x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-2019071…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/108410	vdb-entryx_refsource_BID
https://access.redhat.com/errata/RHSA-2019:1873	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1891	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1959	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:1971	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4058	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:4057	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0036	vendor-advisoryx_refsource_REDHAT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:03:32.874Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/401e7e88d4ef80188ffa07095ac00456f901b8c4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=401e7e88d4ef80188ffa07095ac00456f901b8c4"
          },
          {
            "name": "openSUSE-SU-2019:1479",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K01512680"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20190719-0003/"
          },
          {
            "name": "108410",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/108410"
          },
          {
            "name": "RHSA-2019:1873",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1873"
          },
          {
            "name": "RHSA-2019:1891",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1891"
          },
          {
            "name": "RHSA-2019:1959",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1959"
          },
          {
            "name": "RHSA-2019:1971",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1971"
          },
          {
            "name": "RHSA-2019:4058",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4058"
          },
          {
            "name": "RHSA-2019:4057",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:4057"
          },
          {
            "name": "RHSA-2020:0036",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2020:0036"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module is removed, related to drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-07T15:06:08.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/torvalds/linux/commit/401e7e88d4ef80188ffa07095ac00456f901b8c4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=401e7e88d4ef80188ffa07095ac00456f901b8c4"
        },
        {
          "name": "openSUSE-SU-2019:1479",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K01512680"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20190719-0003/"
        },
        {
          "name": "108410",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/108410"
        },
        {
          "name": "RHSA-2019:1873",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1873"
        },
        {
          "name": "RHSA-2019:1891",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1891"
        },
        {
          "name": "RHSA-2019:1959",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1959"
        },
        {
          "name": "RHSA-2019:1971",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1971"
        },
        {
          "name": "RHSA-2019:4058",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4058"
        },
        {
          "name": "RHSA-2019:4057",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:4057"
        },
        {
          "name": "RHSA-2020:0036",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2020:0036"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-11811",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in the Linux kernel before 5.0.4. There is a use-after-free upon attempted read access to /proc/ioports after the ipmi_si module is removed, related to drivers/char/ipmi/ipmi_si_intf.c, drivers/char/ipmi/ipmi_si_mem_io.c, and drivers/char/ipmi/ipmi_si_port_io.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.4",
              "refsource": "MISC",
              "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.4"
            },
            {
              "name": "https://github.com/torvalds/linux/commit/401e7e88d4ef80188ffa07095ac00456f901b8c4",
              "refsource": "MISC",
              "url": "https://github.com/torvalds/linux/commit/401e7e88d4ef80188ffa07095ac00456f901b8c4"
            },
            {
              "name": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=401e7e88d4ef80188ffa07095ac00456f901b8c4",
              "refsource": "MISC",
              "url": "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=401e7e88d4ef80188ffa07095ac00456f901b8c4"
            },
            {
              "name": "openSUSE-SU-2019:1479",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
            },
            {
              "name": "https://support.f5.com/csp/article/K01512680",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K01512680"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20190719-0003/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20190719-0003/"
            },
            {
              "name": "108410",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/108410"
            },
            {
              "name": "RHSA-2019:1873",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1873"
            },
            {
              "name": "RHSA-2019:1891",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1891"
            },
            {
              "name": "RHSA-2019:1959",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1959"
            },
            {
              "name": "RHSA-2019:1971",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1971"
            },
            {
              "name": "RHSA-2019:4058",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4058"
            },
            {
              "name": "RHSA-2019:4057",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:4057"
            },
            {
              "name": "RHSA-2020:0036",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2020:0036"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-11811",
    "datePublished": "2019-05-07T13:24:48.000Z",
    "dateReserved": "2019-05-07T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:03:32.874Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2019:1873

CVE-2018-16871 (GCVE-0-2018-16871)

CVE-2018-16884 (GCVE-0-2018-16884)

CVE-2019-11085 (GCVE-0-2019-11085)

CVE-2019-11811 (GCVE-0-2019-11811)

Tags

Sightings

Nomenclature

Related by attack behaviour