ALT Linux Team

Package kernel-image-std-debug update in sisyphus on 2019-05-22

ALT-PU-2019-1886-1

Package kernel-image-std-debug updated to version 4.19.45-alt1 for branch sisyphus in task 229810.

Closed vulnerabilities

Published: 2019-05-10

BDU:2019-02780

Уязвимость файла fs/ext4/extents.c ядра операционной системы Linux, позволяющая нарушителю раскрыть защищаемую информацию

Severity: MEDIUM (5.5) Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References:
Published: 2019-05-15
Modified: 2024-11-21

CVE-2019-11833

fs/ext4/extents.c in the Linux kernel through 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top