VDB
CVE-2019-10140
CVE-2019-10140
PUBLISHED
CVSS 5.5 MEDIUM
A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).
EPSS 0.32% · 22.6th percentile
Risk Scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.32%
22.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| linux | linux_kernel | 0 |
| redhat | enterprise_linux | 7.0 |
| OpenSource | kernel: | up to kernel-3.10 |
Timeline
- Aug 15, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Oct 27, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Mar 2, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 4, 2022 EPSS Score
- Jul 6, 2022 EPSS Score
- Sep 8, 2022 EPSS Score
- Nov 10, 2022 EPSS Score
References
- https://security.netapp.com/advisory/ntap-20190905-0002/ url
- https://nvd.nist.gov/vuln/detail/CVE-2019-10140 advisory
- https://access.redhat.com/errata/RHSA-2019:2029 url
- https://access.redhat.com/errata/RHSA-2019:2043 url
- https://access.redhat.com/security/cve/CVE-2019-10140 url
- https://bugzilla.redhat.com/show_bug.cgi?id=1677778 url
- https://security.netapp.com/advisory/ntap-20190905-0002 url
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10140 issue