In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html | Broken Link Mailing List Third Party Advisory |
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.6 | Release Notes Third Party Advisory |
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dea37a97265588da604c6ba80160a287b72c7bfd | Exploit Vendor Advisory |
https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html | Mailing List Third Party Advisory |
https://security.netapp.com/advisory/ntap-20200204-0002/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
20 Dec 2022, 22:15
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h610s:*:*:*:*:*:*:* cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:a:netapp:fas\/aff_baseboard_management_controller:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:aff_baseboard_management_controller:a700s:*:*:*:*:*:*:* |
|
References | (MLIST) https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html - Broken Link, Mailing List, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 4.6 |
Information
Published : 2019-12-25 04:15
Updated : 2024-02-04 20:39
NVD link : CVE-2019-19966
Mitre link : CVE-2019-19966
CVE.ORG link : CVE-2019-19966
JSON object : View
Products Affected
netapp
- fas\/aff_baseboard_management_controller
- solidfire_\&_hci_management_node
- data_availability_services
- active_iq_unified_manager
- e-series_santricity_os_controller
- aff_baseboard_management_controller
- solidfire_baseboard_management_controller
- cloud_backup
- hci_baseboard_management_controller
- steelstore_cloud_integrated_storage
debian
- debian_linux
linux
- linux_kernel
opensuse
- leap
CWE
CWE-416
Use After Free