DeutschShown in its original language — a full translation is planned for a future version.
Linux Kernel: Mehrere Schwachstellen
view advisory published 2019-11-20
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-19037US | medium5.5 | — | ||
ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can be zero. | ||||
| CVE-2019-19039US | medium5.5 | — | ||
__btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sen… | ||||
| CVE-2019-19036US | medium5.5 | — | ||
btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 allows a NULL pointer dereference because rcu_dereference(root->node) can be zero. | ||||
| CVE-2019-18885US | medium5.5 | Exploit | ||
fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled wit… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2020:1663-1 vom 2020-06-18external
- Oracle Linux Security Advisory ELSA-2021-9002 vom 2021-01-07external
- Debian Security Advisory DLA-2483 vom 2020-12-10external
- Debian Security Advisory DLA 2131 vom 2020-03-05external
- Debian Security Advisory DLA-2323 vom 2020-08-12external
- NATIONAL VULNERABILITY DATABASE vom 2019-11-20external
- NATIONAL VULNERABILITY DATABASE vom 2019-11-20external
- NATIONAL VULNERABILITY DATABASE vom 2019-11-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan