CVE-2019-3882

Aliases:UBUNTU-CVE-2019-3882DEBIAN-CVE-2019-3882
Advisory lineage Upstream: 0 Downstream: 30
Modified
Published: 24 Apr 2019, 15:23
Last modified:04 Aug 2024, 19:19

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.54% LOW
1% probability +0.50%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Apr 2019, 15:23
Published
Vulnerability first disclosed
04 Aug 2024, 19:19
Last Modified
Vulnerability information updated

Description

A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • v3.0•MEDIUM•Score: 4.7CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  • v3.0•MEDIUM•Score: 5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.54%• Percentile: 44%

Techniques & Countermeasures

  • CWE-770•Allocation of Resources Without Limits or Throttling

    The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Affected Systems

  • canonical•ubuntu_linux

    14.04 | 16.04 | 18.04 | 18.10 | 19.04

  • debian•linux

    < 4.19.37-1 | < 4.19.37-1 | < 4.19.37-1 | < 4.19.37-1

  • ubuntu•linux

    all | < 4.4.0-148.174 | < 4.15.0-50.54

  • ubuntu•linux-aws

    < 4.4.0-1044.47 | < 4.4.0-1083.93 | < 4.15.0-1039.41

  • ubuntu•linux-aws-hwe

    < 4.15.0-1039.41~16.04.1

  • ubuntu•linux-azure

    < 4.15.0-1045.49~14.04.1 | < 4.15.0-1045.49 | < 4.18.0-1018.18~18.04.1

  • ubuntu•linux-azure-6.11

    all

  • ubuntu•linux-azure-fde

    all

  • ubuntu•linux-fips

    < 4.4.0-1010.13

  • ubuntu•linux-gcp

    < 4.15.0-1032.34~16.04.1 | < 4.15.0-1032.34

  • ubuntu•linux-gcp-6.11

    all

  • ubuntu•linux-gcp-edge

    < 4.18.0-1011.12~18.04.1

  • ubuntu•linux-gke

    all

  • ubuntu•linux-gke-4.15

    < 4.15.0-1032.34

  • ubuntu•linux-hwe

    < 4.15.0-50.54~16.04.1 | < 4.18.0-20.21~18.04.1

  • ubuntu•linux-hwe-6.11

    all

  • ubuntu•linux-intel-iot-realtime

    all

  • ubuntu•linux-kvm

    < 4.4.0-1046.52 | < 4.15.0-1034.34

  • ubuntu•linux-lowlatency-hwe-6.11

    all

  • ubuntu•linux-lts-xenial

    < 4.4.0-148.174~14.04.1

  • ubuntu•linux-oem

    < 4.15.0-1038.43

  • ubuntu•linux-oracle

    < 4.15.0-1013.15~16.04.1 | < 4.15.0-1013.15

  • ubuntu•linux-raspi-realtime

    all

  • ubuntu•linux-raspi2

    < 4.4.0-1109.117 | < 4.15.0-1036.38 | all

  • ubuntu•linux-realtime

    all

  • ubuntu•linux-riscv

    all | all

  • ubuntu•linux-snapdragon

    < 4.4.0-1113.118 | < 4.15.0-1053.57

  • debian•debian_linux

    8.0 | 9.0 | 10.0

  • linux•linux_kernel

    3.10 | 4.14 | 4.18

  • netapp•active_iq_unified_manager_for_vmware_vsphere

    ≥ 9.5

  • netapp•cn1610_firmware

    na

  • netapp•hci_management_node

    na

  • netapp•snapprotect

    na

  • netapp•solidfire

    na

  • netapp•storage_replication_adapter_for_clustered_data_ontap_for_vmware_vsphere

    ≥ 7.2

  • netapp•vasa_provider_for_clustered_data_ontap

    ≥ 7.2

  • netapp•virtual_storage_console_for_vmware_vsphere

    ≥ 7.2

  • opensuse•leap

    15.0 | 15.1 | 42.3

  • the linux foundation•kernel

    3.10, 4.14, 4.18

References (33)