Published: 21/03/2019 Updated: 03/09/2019

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel up to and including 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 8.0
netapp element software management node -
netapp active iq performance analytics services -

Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Several security issues were fixed in the Linux kernel ...

USN 4115-1 introduced a regression in the Linux kernel ...

Impact: Low Public Date: 2018-12-12 CWE: CWE-125 Bugzilla: 1666106: CVE-2018-19985 kernel: oob memory r ...

CWE-125 https://seclists.org/bugtraq/2019/Jan/52 https://hexhive.epfl.ch/projects/perifuzz/http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2019-01/msg00023.html https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html https://security.netapp.com/advisory/ntap-20190404-0002/https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html https://usn.ubuntu.com/4115-1/https://usn.ubuntu.com/4118-1/https://access.redhat.com/errata/RHSA-2019:3517 https://access.redhat.com/errata/RHSA-2019:3309 https://access.redhat.com/errata/RHSA-2019:3517 https://nvd.nist.gov https://usn.ubuntu.com/3910-2/

CVE-2018-19985

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect