CVE-2019-18805 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	9.8 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 67%

Vendor	Product	Version
linux	linux_kernel	4.4 ≤ 𝑥 < 4.4.180
linux	linux_kernel	4.9 ≤ 𝑥 < 4.9.172
linux	linux_kernel	4.14 ≤ 𝑥 < 4.14.115
linux	linux_kernel	4.19 ≤ 𝑥 < 4.19.38
linux	linux_kernel	5.0 ≤ 𝑥 < 5.0.11
linux	linux_kernel	5.1:rc1
linux	linux_kernel	5.1:rc2
linux	linux_kernel	5.1:rc3
linux	linux_kernel	5.1:rc4
linux	linux_kernel	5.1:rc5
linux	linux_kernel	5.1:rc6
linux	linux_kernel	5.1:rc7
opensuse	leap	15.0
opensuse	leap	15.1
redhat	enterprise_linux	7.0
netapp	active_iq_unified_manager	-
netapp	data_availability_services	-
netapp	e-series_santricity_os_controller	11.0.0 ≤ 𝑥 ≤ 11.60.3
netapp	hci_management_node	-
netapp	solidfire	-
netapp	steelstore_cloud_integrated_storage	-
netapp	hci_compute_node	-
netapp	hci_storage_node	-
broadcom	fabric_operating_system	-
netapp	aff_a700s_firmware	-
netapp	fas8300_firmware	-
netapp	fas8700_firmware	-
netapp	aff_a400_firmware	-
netapp	h610s_firmware	-

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
jessie	not-affected
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

groovy	not-affected
focal	not-affected
eoan	not-affected
disco	Fixed 5.0.0-21.22 released
bionic	Fixed 4.15.0-60.67 released
xenial	Fixed 4.4.0-157.185 released
trusty	not-affected

linux-aws

groovy	not-affected
focal	not-affected
eoan	not-affected
disco	ignored
bionic	Fixed 4.15.0-1047.49 released
xenial	Fixed 4.4.0-1090.101 released
trusty	Fixed 4.4.0-1054.58 released

linux-aws-5.0

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-aws-5.3

groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-aws-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-aws-hwe

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	dne
xenial	Fixed 4.15.0-1047.49~16.04.1 released
trusty	dne

linux-azure

groovy	not-affected
focal	not-affected
eoan	not-affected
disco	Fixed 5.0.0-1012.12 released
bionic	Fixed 5.0.0-1014.14~18.04.1 released
xenial	Fixed 4.15.0-1056.61 released
trusty	Fixed 4.15.0-1059.64~14.04.1 released

linux-azure-4.15

groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-azure-5.3

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-azure-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-azure-edge

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	ignored
xenial	dne
trusty	dne

linux-dell300x

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp

groovy	not-affected
focal	not-affected
eoan	not-affected
disco	ignored
bionic	Fixed 4.15.0-1042.45 released
xenial	Fixed 4.15.0-1041.43 released
trusty	dne

linux-gcp-4.15

groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp-5.3

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp-edge

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-4.15

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	Fixed 4.15.0-1041.43 released
xenial	dne
trusty	dne

linux-gke-5.0

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-5.3

groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gkeop

groovy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-hwe

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	Fixed 5.0.0-23.24~18.04.1 released
xenial	Fixed 4.15.0-60.67~16.04.1 released
trusty	dne

linux-hwe-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-hwe-5.8

groovy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-hwe-edge

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-kvm

groovy	not-affected
focal	not-affected
eoan	not-affected
disco	ignored
bionic	Fixed 4.15.0-1043.43 released
xenial	Fixed 4.4.0-1052.59 released
trusty	dne

linux-lts-trusty

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-xenial

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	dne
xenial	dne
trusty	Fixed 4.4.0-164.192~14.04.1 released

linux-oem

groovy	dne
focal	dne
eoan	Fixed 4.15.0-1059.68 released
disco	ignored
bionic	Fixed 4.15.0-1056.65 released
xenial	ignored
trusty	dne

linux-oem-5.10

groovy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.6

groovy	dne
focal	not-affected
eoan	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-osp1

groovy	dne
focal	dne
eoan	Fixed 5.0.0-1018.20 released
disco	ignored
bionic	Fixed 5.0.0-1015.16 released
xenial	dne
trusty	dne

linux-oracle

groovy	not-affected
focal	not-affected
eoan	not-affected
disco	ignored
bionic	Fixed 4.15.0-1022.25 released
xenial	Fixed 4.15.0-1022.25~16.04.1 released
trusty	dne

linux-oracle-5.0

groovy	dne
focal	dne
eoan	dne
disco	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-oracle-5.3

groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-oracle-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-raspi

groovy	not-affected
focal	not-affected
eoan	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-raspi2

groovy	dne
focal	not-affected
eoan	not-affected
disco	ignored
bionic	Fixed 4.15.0-1044.47 released
xenial	Fixed 4.4.0-1117.126 released
trusty	dne

linux-raspi2-5.3

groovy	dne
focal	dne
eoan	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-riscv

groovy	not-affected
focal	not-affected
eoan	dne
bionic	dne
xenial	dne
trusty	dne

linux-snapdragon

groovy	dne
focal	dne
eoan	dne
disco	ignored
bionic	Fixed 4.15.0-1062.69 released
xenial	Fixed 4.4.0-1121.127 released
trusty	dne

Common Weakness Enumeration

CWE-190 - Integer Overflow or Wraparound
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.

References

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html

http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html

https://access.redhat.com/errata/RHSA-2020:0740

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11