Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2019-11833

Good to know:

icon

Date: May 15, 2019

fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.

Language: C

Severity Score

Related Resources (27)

https://access.redhat.com/errata/RHSA-2019:2029
https://nvd.nist.gov/vuln/detail/CVE-2019-11833
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html
https://access.redhat.com/errata/RHSA-2019:2043
https://lists.debian.org/debian-lts-announce/2019/06/msg00011.html
https://security-tracker.debian.org/tracker/CVE-2019-11833
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
https://seclists.org/bugtraq/2019/Jun/26
https://usn.ubuntu.com/4069-2/
https://www.debian.org/security/2019/dsa-4465
https://usn.ubuntu.com/4068-1/
https://usn.ubuntu.com/4076-1/
https://access.redhat.com/errata/RHSA-2019:3309
https://usn.ubuntu.com/4118-1/
http://www.securityfocus.com/bid/108372
https://github.com/torvalds/linux/commit/592acbf16821288ecdc4192c47e3774a4c48bb64
https://usn.ubuntu.com/4095-2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GJGZIMGB72TL7OGWRMHIL43WHXFQWU4X/
https://usn.ubuntu.com/4068-2/
https://usn.ubuntu.com/4069-1/
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html
https://people.canonical.com/~ubuntu-security/cve/CVE-2019-11833
https://lists.debian.org/debian-lts-announce/2019/06/msg00010.html
https://access.redhat.com/security/cve/CVE-2019-11833
https://access.redhat.com/errata/RHSA-2019:3517
https://www.mend.io/vulnerability-database/CVE-2019-11833

Severity Score

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

Use of Uninitialized Resource

CWE-908

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): LOW
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): NONE
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us