CVE-2019-3460 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.5 MEDIUM	ADJACENT_NETWORK	LOW	NONE	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
debian	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 41%

Vendor	Product	Version
linux	linux_kernel	𝑥 ≤ 5.1
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	18.04
canonical	ubuntu_linux	18.10
debian	debian_linux	8.0
redhat	codeready_linux_builder	8.0
redhat	virtualization_host	4.0
redhat	enterprise_linux	8.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_eus	8.1
redhat	enterprise_linux_eus	8.2
redhat	enterprise_linux_eus	8.4
redhat	enterprise_linux_for_real_time_for_nfv_tus	8.2
redhat	enterprise_linux_for_real_time_for_nfv_tus	8.4
redhat	enterprise_linux_for_real_time_tus	8.2
redhat	enterprise_linux_for_real_time_tus	8.4
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_server_aus	8.2
redhat	enterprise_linux_server_aus	8.4
redhat	enterprise_linux_server_tus	8.2
redhat	enterprise_linux_server_tus	8.4
redhat	enterprise_linux_workstation	7.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

disco	not-affected
cosmic	Fixed 4.18.0-17.18 released
bionic	Fixed 4.15.0-47.50 released
xenial	Fixed 4.4.0-145.171 released
trusty	Fixed 3.13.0-168.218 released

linux-aws

disco	not-affected
cosmic	Fixed 4.18.0-1012.14 released
bionic	Fixed 4.15.0-1035.37 released
xenial	Fixed 4.4.0-1079.89 released
trusty	Fixed 4.4.0-1040.43 released

linux-aws-hwe

disco	dne
cosmic	dne
bionic	dne
xenial	Fixed 4.15.0-1035.37~16.04.1 released
trusty	dne

linux-azure

disco	not-affected
cosmic	Fixed 4.18.0-1014.14 released
bionic	Fixed 4.18.0-1014.14~18.04.1 released
xenial	Fixed 4.15.0-1041.45 released
trusty	Fixed 4.15.0-1041.45~14.04.1 released

linux-azure-edge

disco	dne
cosmic	dne
bionic	Fixed 4.18.0-1014.14~18.04.1 released
xenial	Fixed 4.15.0-1041.45 released
trusty	dne

linux-euclid

disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-flo

disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-gcp

disco	not-affected
cosmic	Fixed 4.18.0-1008.9 released
bionic	Fixed 4.15.0-1029.31 released
xenial	Fixed 4.15.0-1029.31~16.04.1 released
trusty	dne

linux-gcp-edge

disco	dne
cosmic	dne
bionic	Fixed 4.18.0-1008.9~18.04.1 released
xenial	dne
trusty	dne

linux-gke

disco	dne
cosmic	dne
bionic	not-affected
xenial	ignored
trusty	dne

linux-goldfish

disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-grouper

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe

disco	dne
cosmic	dne
bionic	Fixed 4.18.0-17.18~18.04.1 released
xenial	Fixed 4.15.0-47.50~16.04.1 released
trusty	dne

linux-hwe-edge

disco	dne
cosmic	dne
bionic	not-affected
xenial	Fixed 4.15.0-47.50~16.04.1 released
trusty	dne

linux-kvm

disco	not-affected
cosmic	Fixed 4.18.0-1009.9 released
bionic	Fixed 4.15.0-1031.31 released
xenial	Fixed 4.4.0-1043.49 released
trusty	dne

linux-lts-trusty

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-utopic

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	ignored

linux-lts-vivid

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	ignored

linux-lts-wily

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	ignored

linux-lts-xenial

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	Fixed 4.4.0-144.170~14.04.1 released

linux-maguro

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-mako

disco	dne
cosmic	dne
bionic	dne
xenial	ignored
trusty	dne

linux-manta

disco	dne
cosmic	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem

disco	not-affected
cosmic	Fixed 4.15.0-1035.40 released
bionic	Fixed 4.15.0-1035.40 released
xenial	ignored
trusty	dne

linux-oracle

disco	not-affected
cosmic	Fixed 4.15.0-1010.12 released
bionic	Fixed 4.15.0-1010.12 released
xenial	Fixed 4.15.0-1010.12~16.04.1 released
trusty	dne

linux-raspi2

disco	not-affected
cosmic	Fixed 4.18.0-1011.13 released
bionic	Fixed 4.15.0-1033.35 released
xenial	Fixed 4.4.0-1106.114 released
trusty	dne

linux-snapdragon

disco	not-affected
cosmic	dne
bionic	Fixed 4.15.0-1053.57 released
xenial	Fixed 4.4.0-1110.115 released
trusty	dne

Known Exploits!

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

http://www.openwall.com/lists/oss-security/2019/06/27/2

http://www.openwall.com/lists/oss-security/2019/06/27/7

http://www.openwall.com/lists/oss-security/2019/06/28/1

http://www.openwall.com/lists/oss-security/2019/06/28/2

http://www.openwall.com/lists/oss-security/2019/08/12/1

https://access.redhat.com/errata/RHSA-2019:2029

https://access.redhat.com/errata/RHSA-2019:2043

https://access.redhat.com/errata/RHSA-2019:3309

https://access.redhat.com/errata/RHSA-2019:3517

https://access.redhat.com/errata/RHSA-2020:0740

https://bugzilla.redhat.com/show_bug.cgi?id=1663179

https://git.kernel.org/linus/af3d5d1c87664a4f150fcf3534c6567cb19909b0

https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html

https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html

https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html

https://lore.kernel.org/linux-bluetooth/20190110062917.GB15047%40kroah.com/

https://marc.info/?l=oss-security&m=154721580222522&w=2

https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3460.html