Published: 18/02/2019 Updated: 02/06/2021

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

In the Linux kernel up to and including 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
linux linux kernel 5.0
redhat enterprise linux 7.0
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
canonical ubuntu linux 18.04
canonical ubuntu linux 18.10
opensuse leap 15.0

In the Linux kernel af_alg_release() in crypto/af_algc neglects to set a NULL value for a certain structure member, which leads to a use-after-free (UAF) in sockfs_setattr A local attacker can use this flaw to escalate privileges and take control of the system (CVE-2019-8912) ...

Impact: Moderate Public Date: 2019-02-15 Bugzilla: 1678685: CVE-2019-8912 kernel: af_alg_release() in cr ...

In the Linux kernel af_alg_release() in crypto/af_algc neglects to set a NULL value for a certain structure member, which leads to a use-after-free (UAF) in sockfs_setattr A local attacker can use this flaw to escalate privileges and take control of the system(CVE-2019-8912) ...

In the Linux kernel through 42010, af_alg_release() in crypto/af_algc neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr ...

Synopsis Important: kernel-alt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-alt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System ...

CVE-2019-8912 Privilege Escalation in PAN-OS ...

Several security issues were fixed in the Linux kernel ...

Palo Alto Networks is aware of a use-after-free (UAF) vulnerability in the Linux kernel's sockfs_setattr (Ref: PAN-113631/ CVE-2019-8912) ...

Oracle Linux Bulletin - April 2019 Description The Oracle Linux Bulletin lists all CVEs that had been resolved and announced in Oracle Linux Security Advisories (ELSA) in the last one month prior to the release of the bulletin Oracle Linux Bulletins are published on the same day as Oracle Critical Patch Updates are release ...

CWE-416 https://usn.ubuntu.com/3931-2/https://usn.ubuntu.com/3931-1/https://usn.ubuntu.com/3930-2/https://usn.ubuntu.com/3930-1/http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00052.html https://access.redhat.com/errata/RHSA-2020:0174 http://patchwork.ozlabs.org/patch/1042902/http://www.securityfocus.com/bid/107063 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-8912 https://www.securityfocus.com/bid/107063 https://tools.cisco.com/security/center/viewAlert.x?alertId=59657 https://nvd.nist.gov https://usn.ubuntu.com/3931-2/

CVE-2019-8912

Vulnerability Summary

Most Upvoted Vulmon Research Post

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect