NetSight
IP …
high7.5

CVE-2019-19050

A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service…

Impact

A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.20 before 5.3.16
from 5.4 before 5.4.3
Version 5.5
FedoraprojectFedora
Versions 30, 31
CanonicalUbuntu Linux
Versions 18.04, 19.10
NetappActive Iq Unified Manager
All versions
NetappData Availability Services
All versions
NetappE-Series Santricity Os Controller
from 11.0.0 through 11.60.3
NetappHci Management Node
All versions
NetappSolidfire
All versions
NetappSteelstore Cloud Integrated Storage
All versions
NetappHci Compute Node
All versions
NetappHci Storage Node
All versions
BroadcomFabric Operating System
All versions

Weakness classification

CWE-401

References