ByteOS Network

Vulnerability Details :

CVE-2019-14284

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-26 Jul, 2019 | 12:25

Updated At-05 Aug, 2024 | 00:12

In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Next, the floppy format operation should be called. It can be triggered by an unprivileged local user even when a floppy disk has not been inserted. NOTE: QEMU creates the floppy device by default.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:26 Jul, 2019 | 12:25

Updated At:05 Aug, 2024 | 00:12

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3	x_refsource_MISC
https://github.com/torvalds/linux/commit/f3554aeb991214cbfafd17d55e2bfddb50282e32	x_refsource_MISC
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3554aeb991214cbfafd17d55e2bfddb50282e32	x_refsource_MISC
https://www.debian.org/security/2019/dsa-4495	vendor-advisory x_refsource_DEBIAN
https://seclists.org/bugtraq/2019/Aug/13	mailing-list x_refsource_BUGTRAQ
https://seclists.org/bugtraq/2019/Aug/18	mailing-list x_refsource_BUGTRAQ
https://www.debian.org/security/2019/dsa-4497	vendor-advisory x_refsource_DEBIAN
https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html	mailing-list x_refsource_MLIST
https://seclists.org/bugtraq/2019/Aug/26	mailing-list x_refsource_BUGTRAQ
https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html	mailing-list x_refsource_MLIST
http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html	x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html	vendor-advisory x_refsource_SUSE
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html	vendor-advisory x_refsource_SUSE
https://usn.ubuntu.com/4117-1/	vendor-advisory x_refsource_UBUNTU
https://usn.ubuntu.com/4114-1/	vendor-advisory x_refsource_UBUNTU
https://usn.ubuntu.com/4115-1/	vendor-advisory x_refsource_UBUNTU
https://usn.ubuntu.com/4116-1/	vendor-advisory x_refsource_UBUNTU
https://usn.ubuntu.com/4118-1/	vendor-advisory x_refsource_UBUNTU
https://security.netapp.com/advisory/ntap-20190905-0002/	x_refsource_CONFIRM
http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html	x_refsource_MISC
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html	x_refsource_MISC

Hyperlink: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3

Resource:

x_refsource_MISC

Hyperlink: https://github.com/torvalds/linux/commit/f3554aeb991214cbfafd17d55e2bfddb50282e32

Resource:

x_refsource_MISC

Hyperlink: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3554aeb991214cbfafd17d55e2bfddb50282e32

Resource:

x_refsource_MISC

Hyperlink: https://www.debian.org/security/2019/dsa-4495

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://seclists.org/bugtraq/2019/Aug/13

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://seclists.org/bugtraq/2019/Aug/18

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://www.debian.org/security/2019/dsa-4497

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://seclists.org/bugtraq/2019/Aug/26

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

Resource:

x_refsource_MISC

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: https://usn.ubuntu.com/4117-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://usn.ubuntu.com/4114-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://usn.ubuntu.com/4115-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://usn.ubuntu.com/4116-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://usn.ubuntu.com/4118-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://security.netapp.com/advisory/ntap-20190905-0002/

Resource:

x_refsource_CONFIRM

Hyperlink: http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html

Resource:

x_refsource_MISC

Hyperlink: http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3	x_refsource_MISC x_transferred
https://github.com/torvalds/linux/commit/f3554aeb991214cbfafd17d55e2bfddb50282e32	x_refsource_MISC x_transferred
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3554aeb991214cbfafd17d55e2bfddb50282e32	x_refsource_MISC x_transferred
https://www.debian.org/security/2019/dsa-4495	vendor-advisory x_refsource_DEBIAN x_transferred
https://seclists.org/bugtraq/2019/Aug/13	mailing-list x_refsource_BUGTRAQ x_transferred
https://seclists.org/bugtraq/2019/Aug/18	mailing-list x_refsource_BUGTRAQ x_transferred
https://www.debian.org/security/2019/dsa-4497	vendor-advisory x_refsource_DEBIAN x_transferred
https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html	mailing-list x_refsource_MLIST x_transferred
https://seclists.org/bugtraq/2019/Aug/26	mailing-list x_refsource_BUGTRAQ x_transferred
https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html	mailing-list x_refsource_MLIST x_transferred
http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html	x_refsource_MISC x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html	vendor-advisory x_refsource_SUSE x_transferred
https://usn.ubuntu.com/4117-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://usn.ubuntu.com/4114-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://usn.ubuntu.com/4115-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://usn.ubuntu.com/4116-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://usn.ubuntu.com/4118-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://security.netapp.com/advisory/ntap-20190905-0002/	x_refsource_CONFIRM x_transferred
http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html	x_refsource_MISC x_transferred
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html	x_refsource_MISC x_transferred

Hyperlink: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://github.com/torvalds/linux/commit/f3554aeb991214cbfafd17d55e2bfddb50282e32

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3554aeb991214cbfafd17d55e2bfddb50282e32

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://www.debian.org/security/2019/dsa-4495

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://seclists.org/bugtraq/2019/Aug/13

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: https://seclists.org/bugtraq/2019/Aug/18

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: https://www.debian.org/security/2019/dsa-4497

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://seclists.org/bugtraq/2019/Aug/26

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: https://usn.ubuntu.com/4117-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://usn.ubuntu.com/4114-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://usn.ubuntu.com/4115-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://usn.ubuntu.com/4116-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://usn.ubuntu.com/4118-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://security.netapp.com/advisory/ntap-20190905-0002/

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:26 Jul, 2019 | 13:15

Updated At:11 Aug, 2019 | 23:15

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.2	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.0

Base score: 6.2

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 2.1

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions before 5.2.3(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-369	Primary	nvd@nist.gov

CWE ID: CWE-369

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.html	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.html	cve@mitre.org	N/A
http://packetstormsecurity.com/files/154059/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html	cve@mitre.org	N/A
http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html	cve@mitre.org	N/A
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html	cve@mitre.org	N/A
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3	cve@mitre.org	Release Notes Vendor Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f3554aeb991214cbfafd17d55e2bfddb50282e32	cve@mitre.org	Patch Vendor Advisory
https://github.com/torvalds/linux/commit/f3554aeb991214cbfafd17d55e2bfddb50282e32	cve@mitre.org	Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html	cve@mitre.org	N/A
https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html	cve@mitre.org	N/A
https://seclists.org/bugtraq/2019/Aug/13	cve@mitre.org	N/A
https://seclists.org/bugtraq/2019/Aug/18	cve@mitre.org	N/A
https://seclists.org/bugtraq/2019/Aug/26	cve@mitre.org	N/A
https://security.netapp.com/advisory/ntap-20190905-0002/	cve@mitre.org	N/A
https://usn.ubuntu.com/4114-1/	cve@mitre.org	N/A
https://usn.ubuntu.com/4115-1/	cve@mitre.org	N/A
https://usn.ubuntu.com/4116-1/	cve@mitre.org	N/A
https://usn.ubuntu.com/4117-1/	cve@mitre.org	N/A
https://usn.ubuntu.com/4118-1/	cve@mitre.org	N/A
https://www.debian.org/security/2019/dsa-4495	cve@mitre.org	N/A
https://www.debian.org/security/2019/dsa-4497	cve@mitre.org	N/A