NetSight
IP …
high7.5

CVE-2019-19052

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (me…

Impact

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.16 before 3.16.79
from 3.17 before 4.4.201
from 4.5 before 4.9.201
from 4.10 before 4.14.154
from 4.15 before 4.19.84
from 4.20 before 5.3.11
OracleSd-Wan Edge
Version 8.2
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.04, 19.10
DebianDebian Linux
Version 8.0
OpensuseLeap
Version 15.1
NetappActive Iq Unified Manager
All versions
NetappAff Baseboard Management Controller
All versions
NetappCloud Backup
All versions
NetappData Availability Services
All versions
NetappE-Series Santricity Os Controller
Versions 11.0, 11.0.0, 11.20, 11.25, 11.30, 11.30.5r3
NetappFas\/Aff Baseboard Management Controller
All versions
NetappHci Baseboard Management Controller
Version h610s

Weakness classification

CWE-401

References