VDB

DEBIAN-CVE-2019-12378

DEBIAN-CVE-2019-12378 PUBLISHED CVSS 5.5 MEDIUM

An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5. There is an unchecked kmalloc of new_ra, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash). NOTE: This has been disputed as not an issue

Risk Scores

CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:14linux6.18.1-1~exp1, 6.12.38-1, 6.12.41-1
Debian:13linux6.12.38-1, *, 6.16.8-1
Debian:11linux6.11.4-1, 5.10.205-2, 5.10.223-1
Debian:12linux6.11.4-1, 6.11.5-1, 6.11.5-1~bpo12+1

Timeline

  • May 28, 2019 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›