CVE-2019-19046

MEDIUM Year: 2019
CVSS v3 Score
6.5
Medium
CVSS v2 Score
6.8
Medium
Weakness Type
CWE-401
View all →

Vulnerability Description

A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering ida_simple_get() failure, aka CID-4aa7afb0ee20. NOTE: third parties dispute the relevance of this because an attacker cannot realistically control this failure at probe time

Related Vulnerabilities

CVE-2010-2249

MEDIUM
CVSS:6.5(Medium)

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing ma...

CWE-4012010

CVE-2016-9913

MEDIUM
CVSS:6.5(Medium)

Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and p...

CWE-4012016

CVE-2016-9914

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a m...

CWE-4012016

CVE-2016-9915

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/9pfs/9p-handle.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leverag...

CWE-4012016

CVE-2016-9916

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveragi...

CWE-4012016

CVE-2017-5525

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of d...

CWE-4012017