Search/CVE-2019-3874
● CVE — Medium

CVE-2019-3874

Vendordebian, linux, canonical, redhat, netappProductdebian linux, linux kernel, ubuntu linux, enterprise linux, solidfire, hci management node, cn1610 firmware, snapprotect, active iq unified manager for vmware vsphereDiscoveredMar 25, 2019UpdatedNov 21, 2024

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.

CVSS v3.1
6.5 MEDIUM
EPSS
1.77%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
disclosure → media coverage
Mar 25, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024