CVE-2019-14835

HIGHScheduled

Published:Sep 17, 2019(6 years ago)

Modified:Nov 21, 2024

Local AccessNo InteractionLow Complexity

Vulnerability Description

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host.

Attack Characteristics

Local AccessLow ComplexityLow PrivilegesNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

Vendor	Product	Versions	Fixed In
linux	linux_kernel	2.6.34 - 3.16.74	-
linux	linux_kernel	4.4 - 4.4.193	-
linux	linux_kernel	4.9 - 4.9.193

Timeline

Published
CVE disclosed publicly
Sep 17, 20196 years ago
Last Modified
Most recent update
Nov 21, 20241 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064....Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066....Mailing List
http://packetstormsecurity.com/files/154572/Kernel-Live-Patch-Security...Third Party Advisory

CVSS Score

v3.1

7.8/ 10.0

HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

At a Glance

Affected Products

References

linux / linux_kernel

http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security...Third Party Advisory

http://packetstormsecurity.com/files/155212/Slackware-Security-Advisor...Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-...Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/09/24/1Mailing List

http://www.openwall.com/lists/oss-security/2019/10/03/1Mailing List

http://www.openwall.com/lists/oss-security/2019/10/09/3Mailing List

http://www.openwall.com/lists/oss-security/2019/10/09/7Mailing List

https://access.redhat.com/errata/RHBA-2019:2824Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2827Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2828Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2829Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2830Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2854Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2862Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2863Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2864Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2865Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2866Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2867Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2869Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2889Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2899Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2900Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2901Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2924Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14835Issue Tracking

https://lists.debian.org/debian-lts-announce/2019/09/msg00025.htmlMailing List

https://lists.debian.org/debian-lts-announce/2019/10/msg00000.htmlMailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists...Mailing List

https://seclists.org/bugtraq/2019/Nov/11Issue Tracking

https://seclists.org/bugtraq/2019/Sep/41Issue Tracking

https://security.netapp.com/advisory/ntap-20191031-0005/Third Party Advisory

https://usn.ubuntu.com/4135-1/Third Party Advisory

https://usn.ubuntu.com/4135-2/Third Party Advisory

https://www.debian.org/security/2019/dsa-4531Third Party Advisory

https://www.openwall.com/lists/oss-security/2019/09/17/1Exploit

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064....Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066....Mailing List

http://packetstormsecurity.com/files/154572/Kernel-Live-Patch-Security...Third Party Advisory