Published: 05/03/2019 Updated: 12/10/2022

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 496

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

In the Linux kernel prior to 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for malicious users to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 8.0
redhat enterprise linux 7.0
redhat enterprise linux 8.0
opensuse leap 42.3
opensuse leap 15.0
canonical ubuntu linux 18.10
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
canonical ubuntu linux 12.04

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Synopsis Important: kernel-alt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-alt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System ...

A kernel memory leak was found in the kernel_read_file() function in the fs/execc file in the Linux kernel An attacker could use this flaw to cause a memory leak and thus a denial of service (DoS) (CVE-2019-8980) A flaw was found in mmap in the Linux kernel allowing the process to map a null page This allows attackers to abuse this mechanism t ...

A kernel memory leak was found in the kernel_read_file() function in the fs/execc file in the Linux kernel An attacker could use this flaw to cause a memory leak and thus a denial of service (DoS)(CVE-2019-8980) A flaw was found in mmap in the Linux kernel allowing the process to map a null page This allows attackers to abuse this mechanism to ...

Several security issues were fixed in the Linux kernel ...

Impact: Moderate Public Date: 2019-02-27 CWE: CWE-476 Bugzilla: 1686136: CVE-2019-9213 kernel: lack of ...

By following the codepath that Andrea Arcangeli pointed out in his mails regarding the last bug I reported, I noticed that it is possible for userspace on a normal distro to map virtual address 0, which on an X86 system without SMAP enables the exploitation of kernel NULL pointer dereferences The problem is in the following code path: mem_write ...

This Metasploit module attempts to gain root privileges on Linux systems by abusing a NULL pointer dereference in the rds_atomic_free_op function in the Reliable Datagram Sockets (RDS) kernel module (rdsko) Successful exploitation requires the RDS kernel module to be loaded If the RDS module is not blacklisted (default); then it will be loaded a ...

oss-sec mailing list archives   By Date By Thread </form>    Re: Linux kernel: OOB R/W in SNMP NAT module (CVE-2019-9162); virtual address 0 mappable (CVE-2019-9213) <!--X-Subject-Header- ...

common exploits on linux

HapppyHackingOnLinux There are some diversity of collected vulnerabilities and its corresponding exploit skills vulnerabilities CVE identifier titile origin CVE-2019-9213 virtual address 0 is mappable via privileged write() to /proc/*/mem bugschromiumorg/p/project-zero/issues/detail?id=1792&desc=2 exploits title desc origin Heap exploits off

POCs can run in some Linux kernel versions

POC-available POCs can run in some Linux kernel versions CVE-2019-11599 POC运行内核版本：462 运行方式： gcc -o coredump_helper coredump_helperc sudo /set_helpersh gcc -o dumpme dumpmec /dumpme 运行结果：运行poc 通过dmesg查看日志 CVE-2019-9213 POC运行内核版本：462 运行方式： gcc -o nullmap nullmapc /nullmap 运行结果： CVE-

Study Everyday

Skr_StudyEveryday 在这里记录自己所学，每日更新，警醒自己别为懒惰找借口了，以前的就以周为单位了，中间有一段学的比较杂有点记不清了，从今天起以日为单位更新。第一周（2020716-2020719）：csapp及其lab csapp：第一章到第三章 csapp-lab：lab1到lab3 lab1：Data lab 使用<<，&

CVE-2019-9213

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect