CVE-2019-3900

MEDIUM Year: 2019
CVSS v3 Score
6.3
Medium
CVSS v2 Score
6.8
Medium
Weakness Type
CWE-835
View all →

Vulnerability Description

An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.

Related Vulnerabilities

CVE-2023-20200

MEDIUM
CVSS:6.3(Medium)

A vulnerability in the Simple Network Management Protocol (SNMP) service of Cisco FXOS Software for Firepower 4100 Series and Firepower 9300 Security Appliances and of Cisco UCS 6300 Series Fabric Int...

CWE-8352023

CVE-2024-27032

MEDIUM
CVSS:6.3(Medium)

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block...

CWE-8352024

CVE-2015-8785

MEDIUM
CVSS:6.2(Medium)

The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length...

CWE-8352015

CVE-2022-48635

MEDIUM
CVSS:6.2(Medium)

In the Linux kernel, the following vulnerability has been resolved: fsdax: Fix infinite loop in dax_iomap_rw() I got an infinite loop and a WARNING report when executing a tail command in virtiofs. WA...

CWE-8352022

CVE-2024-2397

MEDIUM
CVSS:6.2(Medium)

Due to a bug in packet data buffers management, the PPP printer in tcpdump can enter an infinite loop when reading a crafted DLT_PPP_SERIAL .pcap savefile. This problem does not affect any tcpdump rel...

CWE-8352024

CVE-2010-1282

MEDIUM
CVSS:6.5(Medium)

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted ATOM size in a .dir (aka Director) file.

CWE-8352010