Vulnerability Details CVE-2019-3882
A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a system memory exhaustion and thus a denial of service (DoS). Versions 3.10, 4.14 and 4.18 are vulnerable.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.8%
CVSS Severity
CVSS v3 Score 4.7
CVSS v2 Score 4.9
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html
- https://access.redhat.com/errata/RHSA-2019:2029
- https://access.redhat.com/errata/RHSA-2019:2043
- https://access.redhat.com/errata/RHSA-2019:3309
- https://access.redhat.com/errata/RHSA-2019:3517
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3882
- https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html
- https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html
- https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html
- https://seclists.org/bugtraq/2019/Aug/18
- https://security.netapp.com/advisory/ntap-20190517-0005/
- https://usn.ubuntu.com/3979-1/
- https://usn.ubuntu.com/3980-1/
- https://usn.ubuntu.com/3980-2/
- https://usn.ubuntu.com/3981-1/
- https://usn.ubuntu.com/3981-2/
- https://usn.ubuntu.com/3982-1/
- https://usn.ubuntu.com/3982-2/
- https://www.debian.org/security/2019/dsa-4497
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00037.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html
- https://access.redhat.com/errata/RHSA-2019:2029
- https://access.redhat.com/errata/RHSA-2019:2043
- https://access.redhat.com/errata/RHSA-2019:3309
- https://access.redhat.com/errata/RHSA-2019:3517
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3882
- https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html
- https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html
- https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html
- https://seclists.org/bugtraq/2019/Aug/18
- https://security.netapp.com/advisory/ntap-20190517-0005/
- https://usn.ubuntu.com/3979-1/
- https://usn.ubuntu.com/3980-1/
- https://usn.ubuntu.com/3980-2/
- https://usn.ubuntu.com/3981-1/
- https://usn.ubuntu.com/3981-2/
- https://usn.ubuntu.com/3982-1/
- https://usn.ubuntu.com/3982-2/
- https://www.debian.org/security/2019/dsa-4497
Products affected by CVE-2019-3882
-
cpe:2.3:a:netapp:active_iq_unified_manager_for_vmware_vsphere:*
-
cpe:2.3:a:netapp:hci_management_node:-
-
cpe:2.3:a:netapp:snapprotect:-
-
cpe:2.3:a:netapp:solidfire:-
-
cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap_for_vmware_vsphere:7.2
-
cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:7.2
-
cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:9.6
-
cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:9.7
-
cpe:2.3:a:netapp:virtual_storage_console_for_vmware_vsphere:7.2
-
cpe:2.3:h:netapp:cn1610:-
-
cpe:2.3:o:canonical:ubuntu_linux:14.04
-
cpe:2.3:o:canonical:ubuntu_linux:16.04
-
cpe:2.3:o:canonical:ubuntu_linux:18.04
-
cpe:2.3:o:canonical:ubuntu_linux:18.10
-
cpe:2.3:o:canonical:ubuntu_linux:19.04
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0
-
cpe:2.3:o:fedoraproject:fedora:-
-
cpe:2.3:o:fedoraproject:fedora:10
-
cpe:2.3:o:fedoraproject:fedora:11
-
cpe:2.3:o:fedoraproject:fedora:12
-
cpe:2.3:o:fedoraproject:fedora:13
-
cpe:2.3:o:fedoraproject:fedora:14
-
cpe:2.3:o:fedoraproject:fedora:15
-
cpe:2.3:o:fedoraproject:fedora:16
-
cpe:2.3:o:fedoraproject:fedora:17
-
cpe:2.3:o:fedoraproject:fedora:18
-
cpe:2.3:o:fedoraproject:fedora:19
-
cpe:2.3:o:fedoraproject:fedora:20
-
cpe:2.3:o:fedoraproject:fedora:21
-
cpe:2.3:o:fedoraproject:fedora:22
-
cpe:2.3:o:fedoraproject:fedora:23
-
cpe:2.3:o:fedoraproject:fedora:24
-
cpe:2.3:o:fedoraproject:fedora:25
-
cpe:2.3:o:fedoraproject:fedora:26
-
cpe:2.3:o:fedoraproject:fedora:27
-
cpe:2.3:o:fedoraproject:fedora:28
-
cpe:2.3:o:fedoraproject:fedora:29
-
cpe:2.3:o:fedoraproject:fedora:30
-
cpe:2.3:o:fedoraproject:fedora:31
-
cpe:2.3:o:fedoraproject:fedora:32
-
cpe:2.3:o:fedoraproject:fedora:33
-
cpe:2.3:o:fedoraproject:fedora:34
-
cpe:2.3:o:fedoraproject:fedora:35
-
cpe:2.3:o:fedoraproject:fedora:36
-
cpe:2.3:o:fedoraproject:fedora:37
-
cpe:2.3:o:fedoraproject:fedora:38
-
cpe:2.3:o:fedoraproject:fedora:39
-
cpe:2.3:o:fedoraproject:fedora:40
-
cpe:2.3:o:fedoraproject:fedora:41
-
cpe:2.3:o:fedoraproject:fedora:6
-
cpe:2.3:o:fedoraproject:fedora:7
-
cpe:2.3:o:fedoraproject:fedora:8
-
cpe:2.3:o:fedoraproject:fedora:9
-
cpe:2.3:o:linux:linux_kernel:3.10
-
cpe:2.3:o:linux:linux_kernel:4.14
-
cpe:2.3:o:linux:linux_kernel:4.18
-
cpe:2.3:o:netapp:cn1610_firmware:-
-
cpe:2.3:o:opensuse:leap:15.0
-
cpe:2.3:o:opensuse:leap:15.1
-
cpe:2.3:o:opensuse:leap:42.3