Linux Kernel up to 5.0.18 Array Access net/xfrm/xfrm_user.c __xfrm_policy_unlink out-of-bounds

Summaryinfo

A vulnerability categorized as critical has been discovered in Linux Kernel up to 5.0.18. This affects the function __xfrm_policy_unlink of the file net/xfrm/xfrm_user.c of the component Array Access. Executing a manipulation can lead to out-of-bounds. This vulnerability is registered as CVE-2019-15666. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability has been found in Linux Kernel up to 5.0.18 (Operating System) and classified as critical. This vulnerability affects the function __xfrm_policy_unlink of the file net/xfrm/xfrm_user.c of the component Array Access. The manipulation with an unknown input leads to a out-of-bounds vulnerability. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishandles directory validation.

The weakness was published 08/27/2019 (Website). The advisory is available at lists.debian.org. This vulnerability was named CVE-2019-15666 since 08/27/2019. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 208557 (CentOS 7 : kernel-alt (RHSA-2020:1493)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 5.0.19 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (208557). Similar entries are available at VDB-140320, VDB-140321, VDB-140324 and VDB-140325. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 5.0.0
• 5.0.1
• 5.0.2
• 5.0.3
• 5.0.4
• 5.0.5
• 5.0.6
• 5.0.7
• 5.0.8
• 5.0.9
• 5.0.10
• 5.0.11
• 5.0.12
• 5.0.13
• 5.0.14
• 5.0.15
• 5.0.16
• 5.0.17
• 5.0.18

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion