Search/CVE-2019-19052

● CVE — High

CVE-2019-19052

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.

View graph Watch Export

CVSS v3.1

7.5 HIGH

EPSS

5.38%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Connections

19 relationships

active iq unified manager

source

cloud backup

source

e-series santricity os controller

source

steelstore cloud integrated storage

source

fas/aff baseboard management controller

source

sd-wan edge

source

solidfire & hci management node

source

data availability services

source

solidfire baseboard management controller firmware

source

brocade fabric operating system firmware

source

aff baseboard management controller

source

hci baseboard management controller

source

hci compute node firmware

source

solidfire, enterprise sds & hci storage node

source

Timeline

disclosure → media coverage

Nov 18, 2019

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024