ByteOS Network

Vulnerability Details :

CVE-2019-3460

Summary

Assigner-debian

Assigner Org ID-79363d38-fa19-49d1-9214-5f28da3f3ac5

Published At-11 Apr, 2019 | 16:00

Updated At-04 Aug, 2024 | 19:12

A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:debian

Assigner Org ID:79363d38-fa19-49d1-9214-5f28da3f3ac5

Published At:11 Apr, 2019 | 16:00

Updated At:04 Aug, 2024 | 19:12

▼CVE Numbering Authority (CNA)

A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.

Affected Products

Vendor

Linux Kernel Organization, Inc

Product

Linux

Versions

Affected

before 5.1-rc1
fixed in 5.1-rc1

Problem Types

Type	CWE ID	Description
text	N/A	information leak

Type: text

CWE ID: N/A

Description: information leak

References

Hyperlink	Resource
https://marc.info/?l=oss-security&m=154721580222522&w=2	mailing-list x_refsource_MLIST
https://lore.kernel.org/linux-bluetooth/20190110062917.GB15047%40kroah.com/	mailing-list x_refsource_MLIST
https://git.kernel.org/linus/af3d5d1c87664a4f150fcf3534c6567cb19909b0	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1663179	x_refsource_CONFIRM
https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3460.html	x_refsource_CONFIRM
https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html	mailing-list x_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html	mailing-list x_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2019/06/27/2	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2019/06/27/7	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2019/06/28/1	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2019/06/28/2	mailing-list x_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisory x_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2019/08/12/1	mailing-list x_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:3309	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2019:3517	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2020:0740	vendor-advisory x_refsource_REDHAT

Hyperlink: https://marc.info/?l=oss-security&m=154721580222522&w=2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lore.kernel.org/linux-bluetooth/20190110062917.GB15047%40kroah.com/

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://git.kernel.org/linus/af3d5d1c87664a4f150fcf3534c6567cb19909b0

Resource:

x_refsource_CONFIRM

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1663179

Resource:

x_refsource_CONFIRM

Hyperlink: https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3460.html

Resource:

x_refsource_CONFIRM

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2019/06/27/2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2019/06/27/7

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2019/06/28/1

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2019/06/28/2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://access.redhat.com/errata/RHSA-2019:2043

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:2029

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.openwall.com/lists/oss-security/2019/08/12/1

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3309

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3517

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2020:0740

Resource:

vendor-advisory

x_refsource_REDHAT

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://marc.info/?l=oss-security&m=154721580222522&w=2	mailing-list x_refsource_MLIST x_transferred
https://lore.kernel.org/linux-bluetooth/20190110062917.GB15047%40kroah.com/	mailing-list x_refsource_MLIST x_transferred
https://git.kernel.org/linus/af3d5d1c87664a4f150fcf3534c6567cb19909b0	x_refsource_CONFIRM x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1663179	x_refsource_CONFIRM x_transferred
https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3460.html	x_refsource_CONFIRM x_transferred
https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html	mailing-list x_refsource_MLIST x_transferred
https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html	mailing-list x_refsource_MLIST x_transferred
https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2019/06/27/2	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2019/06/27/7	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2019/06/28/1	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2019/06/28/2	mailing-list x_refsource_MLIST x_transferred
https://access.redhat.com/errata/RHSA-2019:2043	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:2029	vendor-advisory x_refsource_REDHAT x_transferred
http://www.openwall.com/lists/oss-security/2019/08/12/1	mailing-list x_refsource_MLIST x_transferred
https://access.redhat.com/errata/RHSA-2019:3309	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2019:3517	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2020:0740	vendor-advisory x_refsource_REDHAT x_transferred

Hyperlink: https://marc.info/?l=oss-security&m=154721580222522&w=2

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lore.kernel.org/linux-bluetooth/20190110062917.GB15047%40kroah.com/

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://git.kernel.org/linus/af3d5d1c87664a4f150fcf3534c6567cb19909b0

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1663179

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3460.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2019/06/27/2

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2019/06/27/7

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2019/06/28/1

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2019/06/28/2

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:2043

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:2029

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2019/08/12/1

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3309

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2019:3517

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: https://access.redhat.com/errata/RHSA-2020:0740

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@debian.org

Published At:11 Apr, 2019 | 16:29

Updated At:07 Nov, 2023 | 03:09

A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	3.3	LOW	AV:A/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 3.3

Base severity: LOW

Vector:

AV:A/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions up to 5.1(inclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Canonical Ltd.

>>ubuntu_linux>>18.10

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>8.0

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>codeready_linux_builder>>8.0

cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>virtualization_host>>4.0

cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux>>8.0

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_desktop>>7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_eus>>8.1

cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_eus>>8.2

cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_eus>>8.4

cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_real_time>>7

cpe:2.3:o:redhat:enterprise_linux_for_real_time:7:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_real_time>>8

cpe:2.3:o:redhat:enterprise_linux_for_real_time:8:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_real_time_for_nfv>>7

cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:7:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_real_time_for_nfv>>8

cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_real_time_for_nfv_tus>>8.2

cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_real_time_for_nfv_tus>>8.4

cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.4:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_real_time_tus>>8.2

cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_for_real_time_tus>>8.4

cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.4:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server>>7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server_aus>>8.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server_aus>>8.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server_tus>>8.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_server_tus>>8.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux_workstation>>7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov