CVE-2019-3900

 

Published at: - 25-04-2019 05:29

Last modified: - 26-10-2022 01:44

Total changes: - 5

Description

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://www.spinics.net/lists/kernel/msg3111012.html
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3900
• 108076-Third Party Advisory, VDB Entry
• FEDORA-2019-87d807d7cb-Mailing List, Release Notes, Third Party Advisory
• FEDORA-2019-8219efa9f6-Mailing List, Release Notes, Third Party Advisory
• FEDORA-2019-a6cd583a8d-Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190517-0005/
• RHSA-2019:1973-Third Party Advisory
• RHSA-2019:2043-Third Party Advisory
• RHSA-2019:2029-Third Party Advisory
• DSA-4497-Third Party Advisory
• 20190813 [SECURITY] [DSA 4497-1] linux security update-Mailing List, Third Party Advisory
• [debian-lts-announce] 20190814 [SECURITY] [DLA 1884-1] linux security update-Mailing List, Third Party Advisory
• [debian-lts-announce] 20190814 [SECURITY] [DLA 1885-1] linux-4.9 security update-Mailing List, Third Party Advisory
• USN-4114-1-Third Party Advisory
• USN-4117-1-Third Party Advisory
• USN-4116-1-Third Party Advisory
• USN-4115-1-Third Party Advisory
• USN-4118-1-Third Party Advisory
• RHSA-2019:3220-Third Party Advisory
• RHSA-2019:3517-Third Party Advisory
• RHSA-2019:3309-Third Party Advisory
• 20191108 [slackware-security] Slackware 14.2 kernel (SSA:2019-311-01)-Mailing List, Patch, Third Party Advisory
• http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
• RHSA-2019:3836-Third Party Advisory
• RHSA-2019:3967-Third Party Advisory
• RHSA-2019:4058-Third Party Advisory
• RHSA-2020:0204-Third Party Advisory
• https://www.oracle.com/security-alerts/cpuApr2021.html

 

Keywords

NVD

 

CVE-2019-3900

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures