Published: 04/12/2018 Updated: 06/11/2019

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

CVSS v3 Base Score: 4.7 | Impact Score: 3.6 | Exploitability Score: 1

VMScore: 169

Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

An issue exists in the Linux kernel prior to 4.19.3. crypto_report_one() and related functions in crypto/crypto_user.c (the crypto user configuration API) do not fully initialize structures that are copied to userspace, potentially leaking sensitive memory to user programs. NOTE: this is a CVE-2013-2547 regression but with easier exploitability because the attacker does not need a capability (however, the system must have the CONFIG_CRYPTO_USER kconfig option).

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 16.04
canonical ubuntu linux 18.10
canonical ubuntu linux 14.04
canonical ubuntu linux 18.04

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Several security issues were fixed in the Linux kernel ...

USN-3878-1 introduced a regression in the Linux kernel ...

Several security issues were fixed in the Linux kernel ...

CWE-200 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.3 https://github.com/torvalds/linux/commit/f43f39958beb206b53292801e216d9b8a660f087 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f43f39958beb206b53292801e216d9b8a660f087 https://usn.ubuntu.com/3872-1/https://usn.ubuntu.com/3878-1/https://usn.ubuntu.com/3878-2/https://usn.ubuntu.com/3901-2/https://usn.ubuntu.com/3901-1/https://access.redhat.com/errata/RHSA-2019:3517 https://access.redhat.com/errata/RHSA-2019:3309 https://access.redhat.com/errata/RHSA-2019:3517 https://nvd.nist.gov https://usn.ubuntu.com/3901-1/

CVE-2018-19854

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect