{"id":"CVE-2019-18808","published":"2019-11-07T15:29:46Z","modified":"2024-08-05T02:02:39Z","title":"A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9…","vendor":null,"product":null,"tier":"tail","description":{"text":"A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00329,"percentile":0.26044,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20191205-0001/","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYIFGYEDQXP5DVJQQUARQRK2PXKBKQGY/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWWOOJKZ4NQYN4RMFIVJ3ZIXKJJI3MKP/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://usn.ubuntu.com/4526-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/4525-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://www.openwall.com/lists/oss-security/2021/09/14/1","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":5.2,"factors":[{"name":"EPSS percentile","points":5.21}]},"euvd":{"id":"EUVD-2019-8512","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2019-18808-family-cve-2019-18808","children":[{"from":"CVE-2019-18808","to":"CVE-2021-3744","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This vulnerability is similar with the older CVE-2019-18808.","from":"CVE.org","in":"CVE-2021-3744"},{"kind":"same-code","provenance":"machine","files":["drivers/crypto/ccp/ccp-ops.c"],"commits":["https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2","https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680"],"basis":"shared function","functions":["ccp_cmd_queue"]}]},{"from":"CVE-2019-18808","to":"CVE-2021-3764","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"The vulnerability is similar to the older CVE-2019-18808.","from":"CVE.org","in":"CVE-2021-3764"},{"kind":"same-code","provenance":"machine","files":["drivers/crypto/ccp/ccp-ops.c"],"commits":["https://github.com/torvalds/linux/commit/128c66429247add5128c03dc1e144ca56f05a4e2","https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680"],"basis":"shared function","functions":["ccp_cmd_queue"]}]}]}}