WID-SEC-W-2022-0769
Vulnerability from csaf_certbund - Published: 2019-11-07 23:00 - Updated: 2023-09-28 22:00Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zurückzuführen sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source Linux Kernel <= 5.3.9
Open Source
|
cpe:/o:linux:linux_kernel:5.3.9
|
— |
Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zurückzuführen sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source Linux Kernel <= 5.3.9
Open Source
|
cpe:/o:linux:linux_kernel:5.3.9
|
— |
Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zurückzuführen sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source Linux Kernel <= 5.3.9
Open Source
|
cpe:/o:linux:linux_kernel:5.3.9
|
— |
Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zurückzuführen sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source Linux Kernel <= 5.3.9
Open Source
|
cpe:/o:linux:linux_kernel:5.3.9
|
— |
Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zurückzuführen sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source Linux Kernel <= 5.3.9
Open Source
|
cpe:/o:linux:linux_kernel:5.3.9
|
— |
Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zurückzuführen sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source Linux Kernel <= 5.3.9
Open Source
|
cpe:/o:linux:linux_kernel:5.3.9
|
— |
Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zurückzuführen sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source Linux Kernel <= 5.3.9
Open Source
|
cpe:/o:linux:linux_kernel:5.3.9
|
— |
Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zurückzuführen sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Avaya Aura Experience Portal
Avaya
|
cpe:/a:avaya:aura_experience_portal:-
|
— | |
|
Avaya Aura System Manager
Avaya
|
cpe:/a:avaya:aura_system_manager:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Avaya Aura Application Enablement Services
Avaya
|
cpe:/a:avaya:aura_application_enablement_services:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Avaya Aura Session Manager
Avaya
|
cpe:/a:avaya:session_manager:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Avaya Aura Communication Manager
Avaya
|
cpe:/a:avaya:communication_manager:-
|
— | |
|
Avaya Web License Manager
Avaya
|
cpe:/a:avaya:web_license_manager:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source Linux Kernel <= 5.3.9
Open Source
|
cpe:/o:linux:linux_kernel:5.3.9
|
— |
Im Linux Kernel existiert eine Schwachstelle, es handelt sich um einen Use-after-Free-Effekt, welcher eintritt, wenn "aa_label_parse()" in "aa_audit_rule_init()" fehlschlägt. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um beliebigen Programmcode auszuführen.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Open Source Linux Kernel <= 5.3.9
Open Source
|
cpe:/o:linux:linux_kernel:5.3.9
|
— |
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Der Kernel stellt den Kern des Linux Betriebssystems dar.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren oder beliebigen Programmcode auszuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2022-0769 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2019/wid-sec-w-2022-0769.json"
},
{
"category": "self",
"summary": "WID-SEC-2022-0769 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0769"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASMICROVM-KERNEL-4.14-2023-001 vom 2023-09-27",
"url": "https://alas.aws.amazon.com/AL2/ALASMICROVM-KERNEL-4.14-2023-001.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4226-1 vom 2020-01-07",
"url": "https://usn.ubuntu.com/4226-1/"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4225-1 vom 2020-01-07",
"url": "https://usn.ubuntu.com/4225-1/"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4225-2 vom 2020-01-18",
"url": "https://packetstormsecurity.com/files/155995/USN-4225-2.txt"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:0093-1 vom 2020-01-14",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html"
},
{
"category": "external",
"summary": "National Vulnerability Database CVE-2019-18814 vom 2019-11-07",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18814"
},
{
"category": "external",
"summary": "National Vulnerability Database CVE-2019-18813 vom 2019-11-07",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18813"
},
{
"category": "external",
"summary": "National Vulnerability Database CVE-2019-18812 vom 2019-11-07",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18812"
},
{
"category": "external",
"summary": "National Vulnerability Database CVE-2019-18811 vom 2019-11-07",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18811"
},
{
"category": "external",
"summary": "National Vulnerability Database CVE-2019-18810 vom 2019-11-07",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18810"
},
{
"category": "external",
"summary": "National Vulnerability Database CVE-2019-18809 vom 2019-11-07",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18809"
},
{
"category": "external",
"summary": "National Vulnerability Database CVE-2019-18808 vom 2019-11-07",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18808"
},
{
"category": "external",
"summary": "National Vulnerability Database CVE-2019-18807 vom 2019-11-07",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18807"
},
{
"category": "external",
"summary": "National Vulnerability Database CVE-2019-18806 vom 2019-11-07",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-18806"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4208-1 vom 2019-12-03",
"url": "https://usn.ubuntu.com/4208-1/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:3200-1 vom 2019-12-07",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193200-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:3289-1 vom 2019-12-13",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193289-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:3317-1 vom 2019-12-18",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193317-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:3316-1 vom 2019-12-18",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193316-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:3372-1 vom 2019-12-20",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193372-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:3371-1 vom 2019-12-20",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193371-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2019:3381-1 vom 2019-12-23",
"url": "https://www.suse.com/support/update/announcement/2019/suse-su-20193381-1.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4285-1 vom 2020-02-18",
"url": "https://usn.ubuntu.com/4285-1/"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4287-1 vom 2020-02-18",
"url": "https://usn.ubuntu.com/4287-2/"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4284-1 vom 2020-02-18",
"url": "https://usn.ubuntu.com/4284-1/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:0511-1 vom 2020-02-28",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200511-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:0560-1 vom 2020-03-03",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200560-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:0559-1 vom 2020-03-02",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200559-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:0580-1 vom 2020-03-04",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200580-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:0584-1 vom 2020-03-04",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200584-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:0599-1 vom 2020-03-06",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200599-1.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2020:0613-1 vom 2020-03-10",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20200613-1.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4300-1 vom 2020-03-17",
"url": "https://usn.ubuntu.com/4300-1/"
},
{
"category": "external",
"summary": "ORACLE OVMSA-2020-0019 vom 2020-06-04",
"url": "https://oss.oracle.com/pipermail/oraclevm-errata/2020-June/000980.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:2854 vom 2020-07-07",
"url": "https://access.redhat.com/errata/RHSA-2020:2854"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-2323 vom 2020-08-12",
"url": "https://lists.debian.org/debian-lts-announce/2020/debian-lts-announce-202008/msg00019.html"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4526-1 vom 2020-09-22",
"url": "https://usn.ubuntu.com/4526-1/"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4526-1 vom 2020-09-22",
"url": "https://ubuntu.com/security/notices/USN-4526-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-4525-1 vom 2020-09-22",
"url": "https://usn.ubuntu.com/4525-1/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:1177-1 vom 2021-04-13",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-April/008624.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:4060 vom 2020-09-29",
"url": "https://access.redhat.com/errata/RHSA-2020:4060"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:4062 vom 2020-09-29",
"url": "https://access.redhat.com/errata/RHSA-2020:4062"
},
{
"category": "external",
"summary": "AVAYA Security Advisory ASA-2020-140 vom 2020-10-14",
"url": "https://downloads.avaya.com/css/P8/documents/101071393"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:1625-1 vom 2021-05-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-May/008782.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2021:1578 vom 2021-05-18",
"url": "https://access.redhat.com/errata/RHSA-2021:1578"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:1211-1 vom 2021-04-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-April/008642.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:4609 vom 2020-11-04",
"url": "https://access.redhat.com/errata/RHSA-2020:4609"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2020:4431 vom 2020-11-04",
"url": "https://access.redhat.com/errata/RHSA-2020:4431"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:1238-1 vom 2021-04-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-April/008645.html"
},
{
"category": "external",
"summary": "AVAYA Security Advisory ASA-2020-155 vom 2020-12-08",
"url": "https://downloads.avaya.com/css/P8/documents/101072832"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:1975-1 vom 2021-06-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-June/009015.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2021:1977-1 vom 2021-06-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2021-June/009018.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2021-1719 vom 2021-11-04",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1719.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.4-2022-009 vom 2022-01-31",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2022-009.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.4-2022-014 vom 2022-01-31",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2022-014.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALASKERNEL-5.10-2022-007 vom 2022-01-31",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.10-2022-007.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2KERNEL-5.4-2022-027 vom 2022-07-21",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2022-027.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2KERNEL-5.4-2022-029 vom 2022-07-21",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2022-029.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2KERNEL-5.4-2022-031 vom 2022-07-21",
"url": "https://alas.aws.amazon.com/AL2/ALASKERNEL-5.4-2022-031.html"
}
],
"source_lang": "en-US",
"title": "Linux Kernel: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2023-09-28T22:00:00.000+00:00",
"generator": {
"date": "2024-08-15T17:32:05.386+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.5"
}
},
"id": "WID-SEC-W-2022-0769",
"initial_release_date": "2019-11-07T23:00:00.000+00:00",
"revision_history": [
{
"date": "2019-11-07T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2019-12-02T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2019-12-03T23:00:00.000+00:00",
"number": "3",
"summary": "Referenz(en) aufgenommen: FEDORA-2019-124A241044, FEDORA-2019-B86A7BDBA0"
},
{
"date": "2019-12-08T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2019-12-12T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2019-12-17T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2019-12-22T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2019-12-23T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-01-06T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2020-01-14T23:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-01-19T23:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2020-02-18T23:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2020-02-27T23:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-03-02T23:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-03-04T23:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-03-05T23:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-03-09T23:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2020-03-16T23:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2020-06-03T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von ORACLE aufgenommen"
},
{
"date": "2020-07-07T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-08-12T22:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von Debian aufgenommen"
},
{
"date": "2020-09-21T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Ubuntu aufgenommen"
},
{
"date": "2020-09-29T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-10-13T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von AVAYA aufgenommen"
},
{
"date": "2020-11-03T23:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2020-12-09T23:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von AVAYA aufgenommen"
},
{
"date": "2021-04-13T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-04-15T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-04-18T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-05-18T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von SUSE und Red Hat aufgenommen"
},
{
"date": "2021-06-15T22:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2021-11-04T23:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2022-01-30T23:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2022-07-20T22:00:00.000+00:00",
"number": "34",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2022-07-21T22:00:00.000+00:00",
"number": "35",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2023-09-27T22:00:00.000+00:00",
"number": "36",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2023-09-28T22:00:00.000+00:00",
"number": "37",
"summary": "CVE-Zuordnung korrigiert"
}
],
"status": "final",
"version": "37"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Avaya Aura Application Enablement Services",
"product": {
"name": "Avaya Aura Application Enablement Services",
"product_id": "T015516",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Communication Manager",
"product": {
"name": "Avaya Aura Communication Manager",
"product_id": "T015126",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:communication_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Experience Portal",
"product": {
"name": "Avaya Aura Experience Portal",
"product_id": "T015519",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_experience_portal:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura Session Manager",
"product": {
"name": "Avaya Aura Session Manager",
"product_id": "T015127",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:session_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Aura System Manager",
"product": {
"name": "Avaya Aura System Manager",
"product_id": "T015518",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:aura_system_manager:-"
}
}
},
{
"category": "product_name",
"name": "Avaya Web License Manager",
"product": {
"name": "Avaya Web License Manager",
"product_id": "T016243",
"product_identification_helper": {
"cpe": "cpe:/a:avaya:web_license_manager:-"
}
}
}
],
"category": "vendor",
"name": "Avaya"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Open Source Linux Kernel \u003c= 5.3.9",
"product": {
"name": "Open Source Linux Kernel \u003c= 5.3.9",
"product_id": "T015332",
"product_identification_helper": {
"cpe": "cpe:/o:linux:linux_kernel:5.3.9"
}
}
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-18813",
"notes": [
{
"category": "description",
"text": "Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zur\u00fcckzuf\u00fchren sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"T000126",
"T015127",
"398363",
"T015126",
"T016243"
],
"last_affected": [
"T015332"
]
},
"release_date": "2019-11-07T23:00:00.000+00:00",
"title": "CVE-2019-18813"
},
{
"cve": "CVE-2019-18812",
"notes": [
{
"category": "description",
"text": "Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zur\u00fcckzuf\u00fchren sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"T000126",
"T015127",
"398363",
"T015126",
"T016243"
],
"last_affected": [
"T015332"
]
},
"release_date": "2019-11-07T23:00:00.000+00:00",
"title": "CVE-2019-18812"
},
{
"cve": "CVE-2019-18811",
"notes": [
{
"category": "description",
"text": "Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zur\u00fcckzuf\u00fchren sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"T000126",
"T015127",
"398363",
"T015126",
"T016243"
],
"last_affected": [
"T015332"
]
},
"release_date": "2019-11-07T23:00:00.000+00:00",
"title": "CVE-2019-18811"
},
{
"cve": "CVE-2019-18810",
"notes": [
{
"category": "description",
"text": "Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zur\u00fcckzuf\u00fchren sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"T000126",
"T015127",
"398363",
"T015126",
"T016243"
],
"last_affected": [
"T015332"
]
},
"release_date": "2019-11-07T23:00:00.000+00:00",
"title": "CVE-2019-18810"
},
{
"cve": "CVE-2019-18809",
"notes": [
{
"category": "description",
"text": "Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zur\u00fcckzuf\u00fchren sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"T000126",
"T015127",
"398363",
"T015126",
"T016243"
],
"last_affected": [
"T015332"
]
},
"release_date": "2019-11-07T23:00:00.000+00:00",
"title": "CVE-2019-18809"
},
{
"cve": "CVE-2019-18808",
"notes": [
{
"category": "description",
"text": "Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zur\u00fcckzuf\u00fchren sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"T000126",
"T015127",
"398363",
"T015126",
"T016243"
],
"last_affected": [
"T015332"
]
},
"release_date": "2019-11-07T23:00:00.000+00:00",
"title": "CVE-2019-18808"
},
{
"cve": "CVE-2019-18807",
"notes": [
{
"category": "description",
"text": "Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zur\u00fcckzuf\u00fchren sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"T000126",
"T015127",
"398363",
"T015126",
"T016243"
],
"last_affected": [
"T015332"
]
},
"release_date": "2019-11-07T23:00:00.000+00:00",
"title": "CVE-2019-18807"
},
{
"cve": "CVE-2019-18806",
"notes": [
{
"category": "description",
"text": "Im Linux Kernel existieren mehrere Schwachstellen, welche auf Speicherlecks in verschiedenen Treibern zur\u00fcckzuf\u00fchren sind. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"T015519",
"T015518",
"2951",
"T002207",
"67646",
"T015516",
"T000126",
"T015127",
"398363",
"T015126",
"T016243"
],
"last_affected": [
"T015332"
]
},
"release_date": "2019-11-07T23:00:00.000+00:00",
"title": "CVE-2019-18806"
},
{
"cve": "CVE-2019-18814",
"notes": [
{
"category": "description",
"text": "Im Linux Kernel existiert eine Schwachstelle, es handelt sich um einen Use-after-Free-Effekt, welcher eintritt, wenn \"aa_label_parse()\" in \"aa_audit_rule_init()\" fehlschl\u00e4gt. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um beliebigen Programmcode auszuf\u00fchren."
}
],
"product_status": {
"known_affected": [
"2951",
"T002207",
"67646",
"T000126",
"398363"
],
"last_affected": [
"T015332"
]
},
"release_date": "2019-11-07T23:00:00.000+00:00",
"title": "CVE-2019-18814"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.