An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
| AND |
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
History
21 Nov 2024, 04:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - Patch, Third Party Advisory, VDB Entry | |
| References | () http://www.securityfocus.com/bid/108076 - Third Party Advisory, VDB Entry | |
| References | () https://access.redhat.com/errata/RHSA-2019:1973 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2019:2029 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2019:2043 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2019:3220 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2019:3309 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2019:3517 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2019:3836 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2019:3967 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2019:4058 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2020:0204 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3900 - Issue Tracking, Patch, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html - Mailing List, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html - Mailing List, Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYTZH6QCNITK7353S6RCRT2PQHZSDPXD/ - Mailing List | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RI3WXXM5URTZSR3RVEKO6MDXDFIKTZ5R/ - Mailing List | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TOFNJA5NNVXQ6AV6KGZB677JIVXAMJHT/ - Mailing List | |
| References | () https://seclists.org/bugtraq/2019/Aug/18 - Mailing List, Third Party Advisory | |
| References | () https://seclists.org/bugtraq/2019/Nov/11 - Mailing List, Patch, Third Party Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20190517-0005/ - Third Party Advisory | |
| References | () https://usn.ubuntu.com/4114-1/ - Third Party Advisory | |
| References | () https://usn.ubuntu.com/4115-1/ - Third Party Advisory | |
| References | () https://usn.ubuntu.com/4116-1/ - Third Party Advisory | |
| References | () https://usn.ubuntu.com/4117-1/ - Third Party Advisory | |
| References | () https://usn.ubuntu.com/4118-1/ - Third Party Advisory | |
| References | () https://www.debian.org/security/2019/dsa-4497 - Third Party Advisory | |
| References | () https://www.oracle.com/security-alerts/cpuApr2021.html - Third Party Advisory | |
| References | () https://www.spinics.net/lists/kernel/msg3111012.html - Patch, Third Party Advisory |
26 Apr 2024, 16:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:5.1:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.1:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.1:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.1:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:5.1:rc2:*:*:*:*:*:* |
cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:* |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYTZH6QCNITK7353S6RCRT2PQHZSDPXD/ - Mailing List | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RI3WXXM5URTZSR3RVEKO6MDXDFIKTZ5R/ - Mailing List | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TOFNJA5NNVXQ6AV6KGZB677JIVXAMJHT/ - Mailing List |
15 Dec 2021, 15:41
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.oracle.com/security-alerts/cpuApr2021.html - Third Party Advisory | |
| CPE | cpe:2.3:a:oracle:sd-wan_edge:8.2:*:*:*:*:*:*:* |
14 Jun 2021, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2019-04-25 15:29
Updated : 2024-11-21 04:42
NVD link : CVE-2019-3900
Mitre link : CVE-2019-3900
CVE.ORG link : CVE-2019-3900
JSON object : View
Products Affected
redhat
- enterprise_linux
netapp
- cn1610_firmware
- active_iq_unified_manager_for_vmware_vsphere
- cn1610
- solidfire
- hci_management_node
- virtual_storage_console_for_vmware_vsphere
- snapprotect
- storage_replication_adapter_for_clustered_data_ontap_for_vmware_vsphere
- vasa_provider_for_clustered_data_ontap
canonical
- ubuntu_linux
debian
- debian_linux
linux
- linux_kernel
fedoraproject
- fedora
oracle
- sd-wan_edge
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')