A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.
2019-11-18T06:15:11.700
2024-11-21T04:34:04.403
Modified
CVSSv3.1: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:N/I:N/A:C
10.0
6.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | linux | linux_kernel | < 5.3.16 | Yes |
| Operating System | linux | linux_kernel | < 5.4.3 | Yes |
| Operating System | linux | linux_kernel | 5.5 | Yes |
| Operating System | fedoraproject | fedora | 30 | Yes |
| Operating System | fedoraproject | fedora | 31 | Yes |
| Operating System | canonical | ubuntu_linux | 18.04 | Yes |
| Operating System | canonical | ubuntu_linux | 19.10 | Yes |
| Application | netapp | active_iq_unified_manager | - | Yes |
| Application | netapp | data_availability_services | - | Yes |
| Application | netapp | e-series_santricity_os_controller | ≤ 11.60.3 | Yes |
| Application | netapp | hci_management_node | - | Yes |
| Application | netapp | solidfire | - | Yes |
| Application | netapp | steelstore_cloud_integrated_storage | - | Yes |
| Hardware | netapp | hci_compute_node | - | Yes |
| Hardware | netapp | hci_storage_node | - | Yes |
| Operating System | broadcom | fabric_operating_system | - | Yes |
| Operating System | netapp | aff_a700s_firmware | - | Yes |
| Hardware | netapp | aff_a700s | - | No |
| Operating System | netapp | fas8300_firmware | - | Yes |
| Hardware | netapp | fas8300 | - | No |
| Operating System | netapp | fas8700_firmware | - | Yes |
| Hardware | netapp | fas8700 | - | No |
| Operating System | netapp | aff_a400_firmware | - | Yes |
| Hardware | netapp | aff_a400 | - | No |
| Operating System | netapp | h610s_firmware | - | Yes |
| Hardware | netapp | h610s | - | No |