Search/CVE-2019-19816

● CVE — High

CVE-2019-19816

In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image and performing some operations can cause slab-out-of-bounds write access in __btrfs_map_block in fs/btrfs/volumes.c, because a value of 1 for the number of data stripes is mishandled.

View graph Watch Export

CVSS v3.1

7.8 HIGH

EPSS

3.29%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Connections

14 relationships

active iq unified manager

steelstore cloud integrated storage

hci management node

aff a700s firmware

data availability services

aff a400 firmware

fas8300 firmware

fas8700 firmware

Timeline

disclosure → media coverage

Dec 17, 2019

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024