CVE-2019-3900
25.04.2019, 15:29
An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 2.6.34 ≤ 𝑥 < 3.16.72 |
| linux | linux_kernel | 3.17 ≤ 𝑥 < 4.4.191 |
| linux | linux_kernel | 4.5 ≤ 𝑥 < 4.9.190 |
| linux | linux_kernel | 4.10 ≤ 𝑥 < 4.14.133 |
| linux | linux_kernel | 4.15 ≤ 𝑥 < 4.19.64 |
| linux | linux_kernel | 4.20 ≤ 𝑥 < 5.2 |
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux | 7.0 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.04 |
| netapp | active_iq_unified_manager_for_vmware_vsphere | 9.5 ≤ |
| netapp | hci_management_node | - |
| netapp | snapprotect | - |
| netapp | solidfire | - |
| netapp | storage_replication_adapter_for_clustered_data_ontap_for_vmware_vsphere | 7.2 ≤ |
| netapp | vasa_provider_for_clustered_data_ontap | 7.2 ≤ |
| netapp | virtual_storage_console_for_vmware_vsphere | 7.2 ≤ |
| netapp | cn1610_firmware | - |
| oracle | sd-wan_edge | 8.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| linux |
| ||||||||||||
| linux-aws |
| ||||||||||||
| linux-aws-5.0 |
| ||||||||||||
| linux-aws-hwe |
| ||||||||||||
| linux-azure |
| ||||||||||||
| linux-azure-5.3 |
| ||||||||||||
| linux-azure-edge |
| ||||||||||||
| linux-euclid |
| ||||||||||||
| linux-flo |
| ||||||||||||
| linux-gcp |
| ||||||||||||
| linux-gcp-5.3 |
| ||||||||||||
| linux-gcp-edge |
| ||||||||||||
| linux-gke |
| ||||||||||||
| linux-gke-4.15 |
| ||||||||||||
| linux-gke-5.0 |
| ||||||||||||
| linux-goldfish |
| ||||||||||||
| linux-grouper |
| ||||||||||||
| linux-hwe |
| ||||||||||||
| linux-hwe-edge |
| ||||||||||||
| linux-kvm |
| ||||||||||||
| linux-lts-trusty |
| ||||||||||||
| linux-lts-utopic |
| ||||||||||||
| linux-lts-vivid |
| ||||||||||||
| linux-lts-wily |
| ||||||||||||
| linux-lts-xenial |
| ||||||||||||
| linux-maguro |
| ||||||||||||
| linux-mako |
| ||||||||||||
| linux-manta |
| ||||||||||||
| linux-oem |
| ||||||||||||
| linux-oem-5.4 |
| ||||||||||||
| linux-oem-osp1 |
| ||||||||||||
| linux-oracle |
| ||||||||||||
| linux-oracle-5.0 |
| ||||||||||||
| linux-raspi2 |
| ||||||||||||
| linux-raspi2-5.3 |
| ||||||||||||
| linux-snapdragon |
|
Common Weakness Enumeration
References