CVE-2019-19922
lowPriorität · verfolgen · 22EPSS 0.009 · 61. PerzentilEURUUSEPSS · bewertet 2026-10-27
kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound applications by generating a workload that triggers unwanted slice expiration, aka CID-de53fd7aedb1. (In other words, although this slice expiration would typically be seen with benign workloads, it is possible that an attacker could calculate how many stray requests are required to force an entire Kubernetes cluster into a low-performance state caused by slice expiration, and ensure that a DDoS attack sent that number of stray requests. An attack does not affect the stability of the kernel; it only causes mismanagement of application execution.)
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 2.1–5.5
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (21)
Betroffene Produkte und Versionsbereiche.
- netapp active iq unified manageralle VersionennvdUScpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:*:*:*
- netapp aff baseboard management controller= a700nvdUScpe:2.3:h:netapp:aff_baseboard_management_controller:*:*:*:*:*:*:*:*
- netapp data availability servicesalle VersionennvdUScpe:2.3:a:netapp:data_availability_services:*:*:*:*:*:*:*:*
- netapp e-series santricity os controller11.0 → 11.70.2nvdUScpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
- netapp fas/aff baseboard management controlleralle VersionennvdUScpe:2.3:a:netapp:fas\/aff_baseboard_management_controller:*:*:*:*:*:*:*:*
- netapp hci baseboard management controller= h610snvdUScpe:2.3:a:netapp:hci_baseboard_management_controller:*:*:*:*:*:*:*:*
- netapp solidfire & hci management nodealle VersionennvdUScpe:2.3:a:netapp:solidfire_\&_hci_management_node:*:*:*:*:*:*:*:*
- netapp solidfire baseboard management controlleralle VersionennvdUScpe:2.3:h:netapp:solidfire_baseboard_management_controller:*:*:*:*:*:*:*:*
- netapp steelstore cloud integrated storagealle VersionennvdUScpe:2.3:a:netapp:steelstore_cloud_integrated_storage:*:*:*:*:*:*:*:*
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (36)
Externe Belege — Patches, Meldungen, Analysen.
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9cnnvd
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=de53fd7aedb100f03e5d2231cfce0e4993282425cnnvd
- https://github.com/kubernetes/kubernetes/issues/67577cnnvd
- https://github.com/torvalds/linux/commit/de53fd7aedb100f03e5d2231cfce0e4993282425cnnvd
- https://lists.debian.org/debian-lts-announce/2020/01/msg00013.htmlcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-19922cnnvd
- https://packetstormsecurity.com/files/155854/Ubuntu-Security-Notice-USN-4226-1.htmlcnnvd
- https://packetstormsecurity.com/files/157260/Red-Hat-Security-Advisory-2020-1493-01.htmlcnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan