CVE-2019-20054

Published: Dic 28, 2019 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2019-10610 Aliases: GSD-2019-20054
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,5
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
MEDIUM 4,9
Source: [email protected]
Access Vector: local
Access Complexity: low
Authentication: none
Confidentiality: none
Integrity: none
Availability: complete

Description

AI Translation Available

In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0013
Percentile
0,3th
Updated

EPSS Score Trend (Last 91 Days)

476

NULL Pointer Dereference

Stable
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Integrity Confidentiality
Potential Impacts:
Dos: Crash, Exit, Or Restart Execute Unauthorized Code Or Commands Read Memory Modify Memory
Applicable Platforms
Languages: C, C#, C++, Go, Java
Likelihood of Exploit: Medium
View CWE Details
Operating System

A400 Firmware by Netapp

Product Information
Vendor Netapp
Product A400 Firmware
Version -
cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Hardware

Solidfire Baseboard Management Controller by Netapp

Product Information
Vendor Netapp
Product Solidfire Baseboard Management Controller
Version -
cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Data Availability Services by Netapp

Product Information
Vendor Netapp
Product Data Availability Services
Version -
cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

8700 Firmware by Netapp

Product Information
Vendor Netapp
Product 8700 Firmware
Version -
cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version Range Affected
To 5.0.6 (exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Active Iq Unified Manager by Netapp

Product Information
Vendor Netapp
Product Active Iq Unified Manager
Version -
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

8300 Firmware by Netapp

Product Information
Vendor Netapp
Product 8300 Firmware
Version -
cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Cloud Backup by Netapp

Product Information
Vendor Netapp
Product Cloud Backup
Version -
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Fas\/Aff Baseboard Management Controller by Netapp

Product Information
Vendor Netapp
Product Fas\/Aff Baseboard Management Controller
Version -
cpe:2.3:a:netapp:fas\/aff_baseboard_management_controller:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

E-Series Santricity Os Controller by Netapp

Product Information
Vendor Netapp
Product E-Series Santricity Os Controller
Version Range Affected
From 11.0 (inclusive)
To 11.70.2 (inclusive)
cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Solidfire \& Hci Management Node by Netapp

Product Information
Vendor Netapp
Product Solidfire \& Hci Management Node
Version -
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Steelstore Cloud Integrated Storage by Netapp

Product Information
Vendor Netapp
Product Steelstore Cloud Integrated Storage
Version -
cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H610S Firmware by Netapp

Product Information
Vendor Netapp
Product H610S Firmware
Version -
cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://lists.opensuse.org/opensuse-security-announce/2020-0…
Broken Link Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.…
Release Notes Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6
Release Notes Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li…
Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2…
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li…
Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8…
https://security.netapp.com/advisory/ntap-20200204-0002/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200204-0002/
http://lists.opensuse.org/opensuse-security-announce/2020-0…
Broken Link Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.…
Release Notes Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6
Release Notes Vendor Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.6
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li…
Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2…
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li…
Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8…
https://security.netapp.com/advisory/ntap-20200204-0002/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200204-0002/