In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.
References
| Link | Resource |
|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html | Broken Link Mailing List Third Party Advisory |
| https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.6 | Release Notes Third Party Advisory |
| https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dea37a97265588da604c6ba80160a287b72c7bfd | Exploit Vendor Advisory |
| https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html | Mailing List Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20200204-0002/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
20 Dec 2022, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html - Broken Link, Mailing List, Third Party Advisory | |
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html - Mailing List, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 4.6 |
| First Time |
Netapp active Iq Unified Manager
Netapp steelstore Cloud Integrated Storage Netapp e-series Santricity Os Controller Netapp Netapp cloud Backup Netapp solidfire \& Hci Management Node Netapp fas\/aff Baseboard Management Controller Netapp solidfire Baseboard Management Controller Opensuse leap Netapp hci Baseboard Management Controller Netapp aff Baseboard Management Controller Opensuse Netapp data Availability Services |
|
| CPE | cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:netapp:fas\/aff_baseboard_management_controller:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h610s:*:*:*:*:*:*:* cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:aff_baseboard_management_controller:a700s:*:*:*:*:*:*:* |
Information
Published : 2019-12-25 04:15
Updated : 2023-12-10 13:13
NVD link : CVE-2019-19966
Mitre link : CVE-2019-19966
CVE.ORG link : CVE-2019-19966
JSON object : View
Products Affected
debian
- debian_linux
netapp
- hci_baseboard_management_controller
- aff_baseboard_management_controller
- active_iq_unified_manager
- cloud_backup
- data_availability_services
- fas\/aff_baseboard_management_controller
- solidfire_\&_hci_management_node
- e-series_santricity_os_controller
- solidfire_baseboard_management_controller
- steelstore_cloud_integrated_storage
opensuse
- leap
linux
- linux_kernel
CWE
CWE-416
Use After Free