NVD Vulnerability Detail

CVE-2019-8980

Summary	A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.
Publication Date	Feb. 21, 2019, 2:29 p.m.
Registration Date	Jan. 26, 2021, 11:45 a.m.
Last Update	Nov. 21, 2024, 1:50 p.m.

Affected software configurations

Configuration2	or higher	or less	more than	less than
cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::
cpe:2.3:o:canonical:ubuntu_linux:18.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::
cpe:2.3:o:canonical:ubuntu_linux:16.04::::esm:::

Configuration3		or higher	or less	more than	less than
cpe:2.3:o:opensuse:leap:15.0:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:8.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html	Mailing List Third Party Advisory
2	http://www.securityfocus.com/bid/107120	Third Party Advisory VDB Entry
3	https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html	Mailing List Third Party Advisory
4	https://support.f5.com/csp/article/K56480726	Third Party Advisory
5	https://usn.ubuntu.com/3930-1/	Third Party Advisory
6	https://usn.ubuntu.com/3930-2/	Third Party Advisory
7	https://usn.ubuntu.com/3931-1/	Third Party Advisory
8	https://usn.ubuntu.com/3931-2/	Third Party Advisory
9	https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1935698.html
10	https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1935705.html
11	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html	Mailing List Third Party Advisory
12	https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1935705.html
13	https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg1935698.html
14	https://usn.ubuntu.com/3931-2/	Third Party Advisory
15	https://usn.ubuntu.com/3931-1/	Third Party Advisory
16	https://usn.ubuntu.com/3930-2/	Third Party Advisory
17	https://usn.ubuntu.com/3930-1/	Third Party Advisory
18	https://support.f5.com/csp/article/K56480726	Third Party Advisory
19	https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html	Mailing List Third Party Advisory
20	http://www.securityfocus.com/bid/107120	Third Party Advisory VDB Entry

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-401	有効期限後のメモリの解放の欠如	https://cwe.mitre.org/data/definitions/401.html

JVN Vulnerability Information

Linux Kernel におけるリソース管理に関する脆弱性

Title	Linux Kernel におけるリソース管理に関する脆弱性
Summary	Linux Kernel には、リソース管理に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 19, 2019, midnight
Registration Date	March 28, 2019, 6 p.m.
Last Update	March 28, 2019, 6 p.m.

Affected System

Linux

Linux Kernel 4.20.11 まで

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-8980	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8980
National Vulnerability Database (NVD)
2	CVE-2019-8980	https://nvd.nist.gov/vuln/detail/CVE-2019-8980

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	Name	URL
Linux Kernel
1	The Linux Kernel Archives	https://www.kernel.org/
The Mail Archive
2	Re: [PATCH -next] exec: Fix mem leak in kernel_read_file	https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1935705.html
3	[PATCH -next] exec: Fix mem leak in kernel_read_file	https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1935698.html

Change Log

No	Changed Details	Date of change
1	[2019年03月28日] 掲載	March 28, 2019, 6 p.m.