ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-19947

—
CVSS 3.1
4.6 medium
EPSS
<1%p41
Published
()
Modified
Description

In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.

Vendors
linuxdebiancanonicalnetapp
Products
linux kernel, debian linux, ubuntu linux, active iq unified manager, cloud backup, data availability services, e-series santricity os controller, fas\/aff baseboard management controller, hci baseboard management controller, solidfire \& hci management node, steelstore cloud integrated storage, aff baseboard management controller
Weakness
CWE-908
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

No ingested article mentions this CVE yet.