CVE-2019-18814
kernel: use-after-free in aa_audit_rule_init() in security/apparmor/audit.c
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Photon OS. Niedriger laut Red Hat (mittel), Ubuntu (mittel).
Beschreibung
An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/apparmor/audit.c.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 3.0 | linux, linux-aws, linux-esx und 1 weitere | 4.19.84-1.ph3 |
| debian 10 | linux | 4.19.131-1 |
| debian 11 | linux | 5.7.6-1 |
| debian 12 | linux | 5.7.6-1 |
| debian 13 | linux | 5.7.6-1 |
| debian 14 | linux | 5.7.6-1 |
| debian 9 | linux-4.19 | 4.19.132-1~deb9u2 |
| echo | linux | 5.7.6-1 |
| root.io debian 11 | rootio-linux | 5.7.6-1 |
| root.io debian 12 | rootio-linux | 5.7.6-1 |
| root.io debian 13 | rootio-linux | 5.7.6-1 |
| ubuntu 18.04 | linux-azure, linux-hwe | 5.0.0-1014.14~18.04.1 und 1 weitere |
Alle 18 Einträge aus 13 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 3.0 | linux | 4.19.84-1.ph3 |
| Photon OS 3.0 | linux-aws | 4.19.84-1.ph3 |
| Photon OS 3.0 | linux-esx | 4.19.84-1.ph3 |
| Photon OS 3.0 | linux-secure | 4.19.84-1.ph3 |
| debian 10 | linux | 4.19.131-1 |
| debian 11 | linux | 5.7.6-1 |
| debian 12 | linux | 5.7.6-1 |
| debian 13 | linux | 5.7.6-1 |
| debian 14 | linux | 5.7.6-1 |
| debian 9 | linux-4.19 | 4.19.132-1~deb9u2 |
| echo | linux | 5.7.6-1 |
| root.io debian 11 | rootio-linux | 5.7.6-1 |
| root.io debian 12 | rootio-linux | 5.7.6-1 |
| root.io debian 13 | rootio-linux | 5.7.6-1 |
| ubuntu 18.04 | linux-azure | 5.0.0-1014.14~18.04.1 |
| ubuntu 18.04 | linux-hwe | 5.0.0-23.24~18.04.1 |
| ubuntu 18.04-ESM | linux-azure | 5.0.0-1014.14~18.04.1 |
| ubuntu 18.04-ESM | linux-hwe | 5.0.0-23.24~18.04.1 |
Referenzen
- https://access.redhat.com/security/cve/CVE-2019-18814
- https://lists.debian.org/debian-lts-announce/2020/08/msg00019.html
- https://lore.kernel.org/patchwork/patch/1142523/
- https://nvd.nist.gov/vuln/detail/CVE-2019-18814
- https://security.netapp.com/advisory/ntap-20191205-0001/
- https://support.f5.com/csp/article/K21561554?utm_source=f5support&%3Butm_medium=RSS
- https://www.cve.org/CVERecord?id=CVE-2019-18814