7.2
CVSSv2

CVE-2019-15918

Published: 04/09/2019 Updated: 17/01/2023
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

An issue exists in the Linux kernel prior to 5.0.10. SMB2_negotiate in fs/cifs/smb2pdu.c has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

canonical ubuntu linux 18.04

canonical ubuntu linux 14.04

canonical ubuntu linux 16.04

Vendor Advisories

Several security issues were fixed in the Linux kernel ...
In the Linux kernel before 51, there is a memory leak in __feat_register_sp() in net/dccp/featc, which may cause denial of service, aka CID-1d3ff0950e2b (CVE-2019-20096) An issue was discovered in the Linux kernel before 5010 SMB2_negotiate in fs/cifs/smb2pduc has an out-of-bounds read because data structures are incompletely updated after a ...
An issue was discovered in the Linux kernel before 5010 SMB2_negotiate in fs/cifs/smb2pduc has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21(CVE-2019-15918) In the Linux kernel before 51, there is a memory leak in __feat_register_sp() in net/dccp/featc, which may cause denial of ser ...
In the Linux kernel before 51, there is a memory leak in __feat_register_sp() in net/dccp/featc, which may cause denial of service, aka CID-1d3ff0950e2b (CVE-2019-20096) An issue was discovered in the Linux kernel before 5010 SMB2_negotiate in fs/cifs/smb2pduc has an out-of-bounds read because data structures are incompletely updated after a ...
An issue was discovered in the Linux kernel before 5010 SMB2_negotiate in fs/cifs/smb2pduc has an out-of-bounds read because data structures are incompletely updated after a change from smb30 to smb21(CVE-2019-1591) ...