CVE-2019-19060

A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41.

CVSS v3 7.5 HIGH
CVSS v2.0 7.8 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html	Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9	Release Notes Vendor Advisory
https://github.com/torvalds/linux/commit/ab612b1daf415b62c58e130cb3d0f30b255a14d0	Patch Third Party Advisory
https://security.netapp.com/advisory/ntap-20191205-0001/	Third Party Advisory
https://usn.ubuntu.com/4208-1/	Third Party Advisory
https://usn.ubuntu.com/4210-1/	Third Party Advisory
https://usn.ubuntu.com/4226-1/	Third Party Advisory
https://usn.ubuntu.com/4364-1/	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html	Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9	Release Notes Vendor Advisory
https://github.com/torvalds/linux/commit/ab612b1daf415b62c58e130cb3d0f30b255a14d0	Patch Third Party Advisory
https://security.netapp.com/advisory/ntap-20191205-0001/	Third Party Advisory
https://usn.ubuntu.com/4208-1/	Third Party Advisory
https://usn.ubuntu.com/4210-1/	Third Party Advisory
https://usn.ubuntu.com/4226-1/	Third Party Advisory
https://usn.ubuntu.com/4364-1/	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

Configuration 2 (hide)

OR	cpe:2.3:a:netapp:active_iq_unified_manager:-:::::vmware_vsphere::
	cpe:2.3:a:netapp:aff_baseboard_management_controller:-:::::::*
	cpe:2.3:a:netapp:cloud_backup:-:::::::*
	cpe:2.3:a:netapp:data_availability_services:-:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:-::::::
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:p1::::::
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1:::::::*
	cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.2:::::::*
	cpe:2.3:a:netapp:fas\/aff_baseboard_management_controller:-:::::::*
	cpe:2.3:a:netapp:hci_baseboard_management_controller:h610s:::::::*
	cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:::::::*
	cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:::::::*
	cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:::::::*
	cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:::::::*

Configuration 3 (hide)

AND

cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*

Configuration 5 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::
	cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::
	cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
	cpe:2.3:o:canonical:ubuntu_linux:19.04:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:19.10:::::::*
	cpe:2.3:o:opensuse:leap:15.1:::::::*

History

21 Nov 2024, 04:34

Type	Values Removed	Values Added
References	~~() http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - Third Party Advisory~~	() http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - Third Party Advisory
References	~~() https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9 - Release Notes, Vendor Advisory~~	() https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9 - Release Notes, Vendor Advisory
References	~~() https://github.com/torvalds/linux/commit/ab612b1daf415b62c58e130cb3d0f30b255a14d0 - Patch, Third Party Advisory~~	() https://github.com/torvalds/linux/commit/ab612b1daf415b62c58e130cb3d0f30b255a14d0 - Patch, Third Party Advisory
References	~~() https://security.netapp.com/advisory/ntap-20191205-0001/ - Third Party Advisory~~	() https://security.netapp.com/advisory/ntap-20191205-0001/ - Third Party Advisory
References	~~() https://usn.ubuntu.com/4208-1/ - Third Party Advisory~~	() https://usn.ubuntu.com/4208-1/ - Third Party Advisory
References	~~() https://usn.ubuntu.com/4210-1/ - Third Party Advisory~~	() https://usn.ubuntu.com/4210-1/ - Third Party Advisory
References	~~() https://usn.ubuntu.com/4226-1/ - Third Party Advisory~~	() https://usn.ubuntu.com/4226-1/ - Third Party Advisory
References	~~() https://usn.ubuntu.com/4364-1/ - Third Party Advisory~~	() https://usn.ubuntu.com/4364-1/ - Third Party Advisory

08 Nov 2022, 02:47

Type	Values Removed	Values Added
CPE		cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.2:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5:::::::* cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:::::::* cpe:2.3:o:canonical:ubuntu_linux:19.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm::: cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:-:::::: cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40:::::::* cpe:2.3:o:opensuse:leap:15.1:::::::* cpe:2.3:h:netapp:hci_compute_node:-:::::::* cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:::::::* cpe:2.3:a:netapp:active_iq_unified_manager:-:::::vmware_vsphere:: cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1:::::::* cpe:2.3:a:netapp:hci_baseboard_management_controller:h610s:::::::* cpe:2.3:a:netapp:data_availability_services:-:::::::* cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:::::::* cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3:::::::* cpe:2.3:o:canonical:ubuntu_linux:19.10:::::::* cpe:2.3:a:netapp:aff_baseboard_management_controller:-:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20:::::::* cpe:2.3:o:netapp:hci_compute_node_firmware:-:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3:::::::* cpe:2.3:a:netapp:cloud_backup:-:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60:::::::* cpe:2.3:a:netapp:fas\/aff_baseboard_management_controller:-:::::::* cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts::: cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1:::::::* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2:::::::* cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:::::::* cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm::: cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:p1::::::
References	~~(UBUNTU) https://usn.ubuntu.com/4226-1/ -~~	(UBUNTU) https://usn.ubuntu.com/4226-1/ - Third Party Advisory
References	~~(UBUNTU) https://usn.ubuntu.com/4208-1/ -~~	(UBUNTU) https://usn.ubuntu.com/4208-1/ - Third Party Advisory
References	~~(SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html -~~	(SUSE) http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html - Third Party Advisory
References	~~(UBUNTU) https://usn.ubuntu.com/4364-1/ -~~	(UBUNTU) https://usn.ubuntu.com/4364-1/ - Third Party Advisory
References	~~(UBUNTU) https://usn.ubuntu.com/4210-1/ -~~	(UBUNTU) https://usn.ubuntu.com/4210-1/ - Third Party Advisory
References	~~(CONFIRM) https://security.netapp.com/advisory/ntap-20191205-0001/ -~~	(CONFIRM) https://security.netapp.com/advisory/ntap-20191205-0001/ - Third Party Advisory

Information

Published : 2019-11-18 06:15

Updated : 2024-11-21 04:34

NVD link : CVE-2019-19060

Mitre link : CVE-2019-19060

CVE.ORG link : CVE-2019-19060

JSON object : View

Products Affected

netapp

solidfire\,_enterprise_sds_\&_hci_storage_node
aff_baseboard_management_controller
steelstore_cloud_integrated_storage
cloud_backup
solidfire_baseboard_management_controller
solidfire_\&_hci_management_node
solidfire_baseboard_management_controller_firmware
hci_compute_node_firmware
hci_compute_node
data_availability_services
active_iq_unified_manager
hci_baseboard_management_controller
fas\/aff_baseboard_management_controller
e-series_santricity_os_controller

canonical

ubuntu_linux

linux

linux_kernel

broadcom

brocade_fabric_operating_system_firmware

opensuse

leap

CWE

CWE-401

Missing Release of Memory after Effective Lifetime

{"id": "CVE-2019-19060", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-11-18T06:15:12.343", "references": [{"url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/torvalds/linux/commit/ab612b1daf415b62c58e130cb3d0f30b255a14d0", "tags": ["Patch", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://security.netapp.com/advisory/ntap-20191205-0001/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://usn.ubuntu.com/4208-1/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://usn.ubuntu.com/4210-1/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://usn.ubuntu.com/4226-1/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://usn.ubuntu.com/4364-1/", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9", "tags": ["Release Notes", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/torvalds/linux/commit/ab612b1daf415b62c58e130cb3d0f30b255a14d0", "tags": ["Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.netapp.com/advisory/ntap-20191205-0001/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usn.ubuntu.com/4208-1/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usn.ubuntu.com/4210-1/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usn.ubuntu.com/4226-1/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usn.ubuntu.com/4364-1/", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-401"}]}], "descriptions": [{"lang": "en", "value": "A memory leak in the adis_update_scan_mode() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-ab612b1daf41."}, {"lang": "es", "value": "Una p\u00e9rdida de memoria en la funci\u00f3n adis_update_scan_mode_burst() en el archivo drivers/iio/imu/adis_buffer.c en el kernel de Linux versiones anteriores a la versi\u00f3n 5.3.9, permite a atacantes causar una denegaci\u00f3n de servicio (consumo de memoria), tambi\u00e9n se conoce como CID-9c0530e898f3."}], "lastModified": "2024-11-21T04:34:06.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1229D50-3DAA-4031-97C9-8FF008A36A5F", "versionEndExcluding": "4.4.262", "versionStartIncluding": "3.8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3BB1DB0-B588-4D26-89CB-F67E73EDA007", "versionEndExcluding": "4.9.262", "versionStartIncluding": "4.5"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33EEBE13-936B-4210-9B09-9D61A6BE9A35", "versionEndExcluding": "4.14.226", "versionStartIncluding": "4.10"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2083AEA2-E04A-4A55-996D-5BB40D30417A", "versionEndExcluding": "4.19.82", "versionStartIncluding": "4.15"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC19B2E4-2B1F-44F3-9944-91396EAC744D", "versionEndExcluding": "5.3.9", "versionStartIncluding": "4.20"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*", "vulnerable": true, "matchCriteriaId": "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"}, {"criteria": "cpe:2.3:a:netapp:aff_baseboard_management_controller:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C0ADE5D-F91D-4E0D-B6C5-3511B19665F1"}, {"criteria": "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"}, {"criteria": "cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EF46487-B64A-454E-AECC-D74B83170ACD"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AFF1109-26F3-43A5-A4CB-0F169FDBC0DE"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AF71C49-ADEF-4EE2-802C-6159ADD51355"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3BC6E59-2134-4A28-AAD2-77C8AE236BCF"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24377899-5389-4BDC-AC82-0E4186F4DE53"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23FE83DE-AE7C-4313-88E3-886110C31302"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "490B327B-AC20-419B-BB76-8AB6971304BB"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8DCE2754-7A9E-4B3B-91D1-DCF90C1BABE5"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CA74E8B-51E2-4A7C-8A98-0583D31134A6"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B64AB37-A1D9-4163-A51B-4C780361F1F1"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BE9C9D7-9CED-4184-A190-1024A6FB8C82"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B73D4C3C-A511-4E14-B19F-91F561ACB1B8"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:p1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C47D72C-9B6B-4E52-AF0E-56AD58E4A930"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "039C3790-5AA2-4895-AEAE-CC84A71DB907"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4592238-D1F2-43D6-9BAB-2F63ECF9C965"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BA78068-80E9-4E49-9056-88EAB7E3682C"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "092F366C-E8B0-4BE5-B106-0B7A73B08D34"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7992E92-B159-4810-B895-01A9B944058A"}, {"criteria": "cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BDD7AAB-2BF3-4E8C-BEE2-5217E2926C11"}, {"criteria": "cpe:2.3:a:netapp:fas\\/aff_baseboard_management_controller:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66EEA3CA-8CC7-4F0B-8204-6132D4114873"}, {"criteria": "cpe:2.3:a:netapp:hci_baseboard_management_controller:h610s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE7C6010-F736-4BDA-9E3B-C4370BBFA149"}, {"criteria": "cpe:2.3:a:netapp:solidfire\\,_enterprise_sds_\\&_hci_storage_node:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DAA3919C-B2B1-4CB5-BA76-7A079AAFFC52"}, {"criteria": "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6D700C5-F67F-4FFB-BE69-D524592A3D2E"}, {"criteria": "cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E94F7F59-1785-493F-91A7-5F5EA5E87E4D"}, {"criteria": "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2748912-FC54-47F6-8C0C-B96784765B8E"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F921BC85-568E-4B69-A3CD-CF75C76672F1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AD7447BC-F315-4298-A822-549942FC118B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "090AA6F4-4404-4E26-82AB-C3A22636F276"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*", "vulnerable": true, "matchCriteriaId": "815D70A8-47D3-459C-A32C-9FEACA0659D1"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*", "vulnerable": true, "matchCriteriaId": "7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD783B0C-9246-47D9-A937-6144FE8BFF0F"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A31C8344-3E02-4EB8-8BD8-4C84B7959624"}, {"criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

7.5 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8 /10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

JSON object

Attach tags to CVE-2019-19060

7.5^/10

7.8^/10

Attach tags to `CVE-2019-19060`