CVE-2019-19061

A memory leak in the adis_update_scan_mode_burst() function in drivers/iio/imu/adis_buffer.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-9c0530e898f3.

Link	Resource
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9	Release Notes Vendor Advisory
https://github.com/torvalds/linux/commit/9c0530e898f384c5d279bfcebd8bb17af1105873	Patch Third Party Advisory
https://usn.ubuntu.com/4208-1/	Third Party Advisory
https://security.netapp.com/advisory/ntap-20191205-0001/	Third Party Advisory
https://usn.ubuntu.com/4526-1/	Third Party Advisory

Configuration 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:aff_baseboard_management_controller:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:solidfire_&_hci_management_node:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:netapp:solidfire,_enterprise_sds_&_hci_storage_node:-:*:*:*:*:*:*:* cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:fas/aff_baseboard_management_controller:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:-:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2:p1:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.2:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h610s:*:*:*:*:*:*:*

---

Published : 2019-11-18 06:15

Updated : 2023-01-19 08:08

---

NVD link : CVE-2019-19061

Mitre link : CVE-2019-19061

Netapp

Solidfire Baseboard Management Controller Firmware

CWE-401