Search/CVE-2019-16995
● CVE — High

CVE-2019-16995

Vendorlinux, netapp, opensuseProductlinux kernel, h300e firmware, h300s firmware, h410c firmware, h410s firmware, h500e firmware, h500s firmware, h610s firmware, h700e firmware, h700s firmware, leap, steelstore cloud integrated storage, solidfire, hci management node, service processor, aff a700s firmware, data availability servicesDiscoveredSep 30, 2019UpdatedNov 21, 2024

In the Linux kernel before 5.0.3, a memory leak exits in hsr_dev_finalize() in net/hsr/hsr_device.c if hsr_add_port fails to add a port, which may cause denial of service, aka CID-6caabe7f197d.

CVSS v3.1
7.5 HIGH
EPSS
3.53%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
disclosure → media coverage
Sep 30, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024