CVE-2019-14835
High
Description
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux Kernel
PublishedSep 17, 2019
First seenSep 17, 2019
Weakness typeCWE-120CWE-120
How to fix
Update
- linux linux_kernel3.16.74, 4.4.193, 4.9.193, 4.14.144, 4.19.73, 5.2.15 or later
Vendor advisories
- usn.ubuntu.com/4135-2/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQFY6JYFIQ2VFQ7QCSXPWTUL5ZDNCJL5/
- access.redhat.com/errata/RHSA-2019:2827
- access.redhat.com/errata/RHSA-2019:2828
- access.redhat.com/errata/RHSA-2019:2830
- access.redhat.com/errata/RHSA-2019:2829
- access.redhat.com/errata/RHSA-2019:2854
- access.redhat.com/errata/RHSA-2019:2862
- access.redhat.com/errata/RHSA-2019:2863
- access.redhat.com/errata/RHSA-2019:2866
- access.redhat.com/errata/RHSA-2019:2864
- access.redhat.com/errata/RHSA-2019:2865
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 2.6.34 ≤ v < 3.16.74, 4.4 ≤ v < 4.4.193, 4.9 ≤ v < 4.9.193, 4.14 ≤ v < 4.14.144, 4.19 ≤ v < 4.19.73, 5.2 ≤ v < 5.2.15, 5.3 | 3.16.74, 4.4.193, 4.9.193, 4.14.144, 4.19.73, 5.2.15 |
| canonical ubuntu_linux | 12.04, 14.04, 16.04, 18.04, 19.04 | — |
| debian debian_linux | 8.0, 9.0, 10.0 | — |
| fedoraproject fedora | 29, 30 | — |
| opensuse leap | 15.0, 15.1 | — |
| netapp aff_a700s_firmware | No range specified | — |
| netapp h410c_firmware | No range specified | — |
| netapp h610s_firmware | No range specified | — |
| netapp h300s_firmware | No range specified | — |
| netapp h500s_firmware | No range specified | — |
| netapp h700s_firmware | No range specified | — |
| netapp h300e_firmware | No range specified | — |
| netapp h500e_firmware | No range specified | — |
| netapp h700e_firmware | No range specified | — |
| netapp h410s_firmware | No range specified | — |
| netapp data_availability_services | No range specified | — |
| netapp hci_management_node | No range specified | — |
| netapp service_processor | No range specified | — |
| netapp solidfire | No range specified | — |
| netapp steelstore_cloud_integrated_storage | No range specified | — |
| redhat openshift_container_platform | 3.11 | — |
| redhat enterprise_linux | 8.0 | — |
| redhat enterprise_linux_desktop | 6.0, 7.0 | — |
| redhat enterprise_linux_eus | 7.5, 7.6, 7.7 | — |
| redhat enterprise_linux_for_real_time | 7, 8 | — |
| redhat enterprise_linux_server | 6.0, 7.0, 7.6 | — |
| redhat enterprise_linux_server_aus | 6.5, 6.6, 7.2, 7.3, 7.4, 7.6, 7.7 | — |
| redhat enterprise_linux_server_tus | 7.2, 7.3, 7.4, 7.6, 7.7 | — |
| redhat enterprise_linux_workstation | 6.0, 7.0 | — |
| redhat virtualization | 4.0 | — |
| redhat virtualization_host | 4.0 | — |
| huawei imanager_neteco | v600r009c00, v600r009c10spc200 | — |
| huawei imanager_neteco_6000 | v600r008c10spc300, v600r008c20 | — |
| huawei manageone | 6.5.0, 6.5.0.spc100.b210, 6.5.1rc1.b060, 6.5.1rc1.b080, 6.5.rc2.b050 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.