ID

VAR-201909-0695


CVE

CVE-2019-14835


TITLE

Ubuntu Security Notice USN-4135-1

Trust: 0.1

sources: PACKETSTORM: 154514

DESCRIPTION

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. CVE-2019-14821 Matt Delco reported a race condition in KVM's coalesced MMIO facility, which could lead to out-of-bounds access in the kernel. A local attacker permitted to access /dev/kvm could use this to cause a denial of service (memory corruption or crash) or possibly for privilege escalation. CVE-2019-14835 Peter Pi of Tencent Blade Team discovered a missing bounds check in vhost_net, the network back-end driver for KVM hosts, leading to a buffer overflow when the host begins live migration of a VM. An attacker in control of a VM could use this to cause a denial of service (memory corruption or crash) or possibly for privilege escalation on the host. CVE-2019-15117 Hui Peng and Mathias Payer reported a missing bounds check in the usb-audio driver's descriptor parsing code, leading to a buffer over-read. An attacker able to add USB devices could possibly use this to cause a denial of service (crash). CVE-2019-15118 Hui Peng and Mathias Payer reported unbounded recursion in the usb-audio driver's descriptor parsing code, leading to a stack overflow. An attacker able to add USB devices could use this to cause a denial of service (memory corruption or crash) or possibly for privilege escalation. On the amd64 architecture, and on the arm64 architecture in buster, this is mitigated by a guard page on the kernel stack, so that it is only possible to cause a crash. CVE-2019-15902 Brad Spengler reported that a backporting error reintroduced a spectre-v1 vulnerability in the ptrace subsystem in the ptrace_get_debugreg() function. For the oldstable distribution (stretch), these problems have been fixed in version 4.9.189-3+deb9u1. For the stable distribution (buster), these problems have been fixed in version 4.19.67-2+deb10u1. For the detailed security status of linux please refer to its security tracker page at: https://security-tracker.debian.org/tracker/linux Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl2K5xlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0Sj8xAAnBGWzlmy5RyQe8VCE3kkMpwmH/00I5IFpjTbAVvyHzKVYl96YbY1YuAP ID++cBxBElWCQriwCESc5Um/BGpOMmTa3VlkXIVy6uHgwt1Hn+ZW/syFaGt0/brW eKIecVQLyZaV7OOx4Q+J9H5WN1FNKoV3BCsfUFlRqNCUtYQ46X7pN+gyytW4KbZo AEbPkEdUhv2Z6ndq8Z/OJ5cyYms+OonEt08e2qcN0Ig+qRY9l3fgSn/X3tKQiuJj jGKPkd0VYrFzfDKekcboIBZyegahReRe4k+V8I+o/acuQJGR1cV/qCGxboFFI2+s WeSUhaVixP+7HLXyRljFBdvXlAnx/IajEPG+RAVt6zZs1yK+8bVIhai5TarcwbF3 DWQZvpAeLaKgIN4x7s7xDHNJzO9Ea9fhXm/9T1AoaO3wdN2zjOYHLG3YO4TF0PpF rYY9t17uNdAuCxPeQWCciDOiNQVbEmr3+al/78m2VZcBYEI2s1E9fgQJV21rRlv+ fEavwX9OJg6GKcW9v6cyegyf4gfTvjyzIP/rcmn55hiQ9vjVNykkoNUES5Do6sTb /pSSRuUpJtEE+6LnnqbdD0E6l8SC6zgA/+Pu/7BrACxlk9bhYFmVaAwbPPEuRgrz 3d87MB8FEHu4RDGSgomb849wuAXnEVDwM034VtURUSEAXVFQ0dY=Wqdv -----END PGP SIGNATURE----- . 8) - x86_64 3. Description: The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. 7.6) - ppc64, ppc64le, x86_64 3. (CVE-2019-14835) 4. 7) - aarch64, noarch, ppc64le 3. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. The following packages have been upgraded to a later upstream version: redhat-release-virtualization-host (4.2), redhat-virtualization-host (4.2). ========================================================================= Ubuntu Security Notice USN-4135-2 September 18, 2019 linux, linux-aws, linux-azure, linux-lts-trusty, linux-lts-xenial vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 ESM - Ubuntu 12.04 ESM Summary: Several security issues were fixed in the Linux kernel. (CVE-2019-14835) It was discovered that the Linux kernel on PowerPC architectures did not properly handle Facility Unavailable exceptions in some situations. A local attacker could use this to expose sensitive information. (CVE-2019-15030) It was discovered that the Linux kernel on PowerPC architectures did not properly handle exceptions on interrupts in some situations. A local attacker could use this to expose sensitive information. (CVE-2019-15031) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM: linux-image-3.13.0-173-generic 3.13.0-173.224 linux-image-3.13.0-173-generic-lpae 3.13.0-173.224 linux-image-3.13.0-173-lowlatency 3.13.0-173.224 linux-image-3.13.0-173-powerpc-e500 3.13.0-173.224 linux-image-3.13.0-173-powerpc-e500mc 3.13.0-173.224 linux-image-3.13.0-173-powerpc-smp 3.13.0-173.224 linux-image-3.13.0-173-powerpc64-emb 3.13.0-173.224 linux-image-3.13.0-173-powerpc64-smp 3.13.0-173.224 linux-image-4.15.0-1059-azure 4.15.0-1059.64~14.04.1 linux-image-4.4.0-1054-aws 4.4.0-1054.58 linux-image-4.4.0-164-generic 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-generic-lpae 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-lowlatency 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-powerpc-e500mc 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-powerpc-smp 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-powerpc64-emb 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-powerpc64-smp 4.4.0-164.192~14.04.1 linux-image-aws 4.4.0.1054.55 linux-image-azure 4.15.0.1059.45 linux-image-generic 3.13.0.173.184 linux-image-generic-lpae 3.13.0.173.184 linux-image-generic-lpae-lts-xenial 4.4.0.164.143 linux-image-generic-lts-xenial 4.4.0.164.143 linux-image-lowlatency 3.13.0.173.184 linux-image-lowlatency-lts-xenial 4.4.0.164.143 linux-image-powerpc-e500 3.13.0.173.184 linux-image-powerpc-e500mc 3.13.0.173.184 linux-image-powerpc-e500mc-lts-xenial 4.4.0.164.143 linux-image-powerpc-smp 3.13.0.173.184 linux-image-powerpc-smp-lts-xenial 4.4.0.164.143 linux-image-powerpc64-emb 3.13.0.173.184 linux-image-powerpc64-emb-lts-xenial 4.4.0.164.143 linux-image-powerpc64-smp 3.13.0.173.184 linux-image-powerpc64-smp-lts-xenial 4.4.0.164.143 linux-image-server 3.13.0.173.184 linux-image-virtual 3.13.0.173.184 linux-image-virtual-lts-xenial 4.4.0.164.143 Ubuntu 12.04 ESM: linux-image-3.13.0-173-generic 3.13.0-173.224~12.04.1 linux-image-3.13.0-173-generic-lpae 3.13.0-173.224~12.04.1 linux-image-3.13.0-173-lowlatency 3.13.0-173.224~12.04.1 linux-image-3.2.0-143-generic 3.2.0-143.190 linux-image-3.2.0-143-generic-pae 3.2.0-143.190 linux-image-3.2.0-143-highbank 3.2.0-143.190 linux-image-3.2.0-143-omap 3.2.0-143.190 linux-image-3.2.0-143-powerpc-smp 3.2.0-143.190 linux-image-3.2.0-143-powerpc64-smp 3.2.0-143.190 linux-image-3.2.0-143-virtual 3.2.0-143.190 linux-image-generic 3.2.0.143.158 linux-image-generic-lpae-lts-trusty 3.13.0.173.161 linux-image-generic-lts-trusty 3.13.0.173.161 linux-image-generic-pae 3.2.0.143.158 linux-image-highbank 3.2.0.143.158 linux-image-omap 3.2.0.143.158 linux-image-powerpc 3.2.0.143.158 linux-image-powerpc-smp 3.2.0.143.158 linux-image-powerpc64-smp 3.2.0.143.158 linux-image-server 3.2.0.143.158 linux-image-virtual 3.2.0.143.158 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security and bug fix update Advisory ID: RHSA-2019:2899-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2899 Issue date: 2019-09-25 CVE Names: CVE-2019-1125 CVE-2019-14835 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support, Red Hat Enterprise Linux 7.2 Telco Extended Update Support, and Red Hat Enterprise Linux 7.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Server AUS (v. 7.2) - noarch, x86_64 Red Hat Enterprise Linux Server E4S (v. 7.2) - noarch, x86_64 Red Hat Enterprise Linux Server Optional AUS (v. 7.2) - x86_64 Red Hat Enterprise Linux Server Optional E4S (v. 7.2) - x86_64 Red Hat Enterprise Linux Server Optional TUS (v. 7.2) - x86_64 Red Hat Enterprise Linux Server TUS (v. 7.2) - noarch, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. (CVE-2019-14835) * kernel: hw: Spectre SWAPGS gadget vulnerability (CVE-2019-1125) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * fs deadlock when a memory allocation waits on page writeback in NOFS context (BZ#1729103) * fragmented packets timing out (BZ#1729409) * kernel build: speed up debuginfo extraction (BZ#1731460) * use "make -jN" for modules_install (BZ#1735079) * shmem: consider shm_mnt as a long-term mount (BZ#1737374) * raid1d can hang in freeze_array if handling a mix of read and write errors (BZ#1737792) * Backport TCP follow-up for small buffers (BZ#1739125) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1724389 - CVE-2019-1125 kernel: hw: Spectre SWAPGS gadget vulnerability 1750727 - CVE-2019-14835 kernel: vhost-net: guest to host kernel escape during migration 6. Package List: Red Hat Enterprise Linux Server AUS (v. 7.2): Source: kernel-3.10.0-327.82.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-327.82.1.el7.noarch.rpm kernel-doc-3.10.0-327.82.1.el7.noarch.rpm x86_64: kernel-3.10.0-327.82.1.el7.x86_64.rpm kernel-debug-3.10.0-327.82.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-327.82.1.el7.x86_64.rpm kernel-devel-3.10.0-327.82.1.el7.x86_64.rpm kernel-headers-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-327.82.1.el7.x86_64.rpm perf-3.10.0-327.82.1.el7.x86_64.rpm perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm python-perf-3.10.0-327.82.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm Red Hat Enterprise Linux Server E4S (v. 7.2): Source: kernel-3.10.0-327.82.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-327.82.1.el7.noarch.rpm kernel-doc-3.10.0-327.82.1.el7.noarch.rpm x86_64: kernel-3.10.0-327.82.1.el7.x86_64.rpm kernel-debug-3.10.0-327.82.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-327.82.1.el7.x86_64.rpm kernel-devel-3.10.0-327.82.1.el7.x86_64.rpm kernel-headers-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-327.82.1.el7.x86_64.rpm perf-3.10.0-327.82.1.el7.x86_64.rpm perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm python-perf-3.10.0-327.82.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm Red Hat Enterprise Linux Server TUS (v. 7.2): Source: kernel-3.10.0-327.82.1.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-327.82.1.el7.noarch.rpm kernel-doc-3.10.0-327.82.1.el7.noarch.rpm x86_64: kernel-3.10.0-327.82.1.el7.x86_64.rpm kernel-debug-3.10.0-327.82.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-327.82.1.el7.x86_64.rpm kernel-devel-3.10.0-327.82.1.el7.x86_64.rpm kernel-headers-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-327.82.1.el7.x86_64.rpm perf-3.10.0-327.82.1.el7.x86_64.rpm perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm python-perf-3.10.0-327.82.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional AUS (v. 7.2): x86_64: kernel-debug-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-327.82.1.el7.x86_64.rpm perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional E4S (v. 7.2): x86_64: kernel-debug-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-327.82.1.el7.x86_64.rpm perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional TUS (v. 7.2): x86_64: kernel-debug-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-327.82.1.el7.x86_64.rpm perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-327.82.1.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-1125 https://access.redhat.com/security/cve/CVE-2019-14835 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/articles/4329821 https://access.redhat.com/security/vulnerabilities/kernel-vhost 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXYtbANzjgjWX9erEAQiXbhAAj+34UgAIhJLCg/hNkzjZN1VH8DYLbN2p sIC116NtyojbTTSRQXCH1/hwfn8ywnbEFK7IhZCn/V8M283ALxZG88+HS61SNvrN 0ckyt5heoH7uBKddAnNnDIekO+H5aSNnM9RLY/pKUpJJTYYCO59mAggHm+R2UvNW PWc4fHZTIdvzB5xtQhlnauZg9ypoKcxmn+uFhvMDpVBxZVPTh0sdfd20C5jLDOlE 2ecxTE39Zy6zrm0lnqT/epeNz233qq8a62GhXSggqt/35L6mgsol/rbAPlo1g7Qo 3Swd5zM+VOhoalMptpxYus7iOhfhmQK/IgUUq9qZHUF2QFL4rsDoGb4Lga+N+oVh fyfrEHVhw9sHPb8iwbUHGLj9e3gx+ASln/u4ZMMzH8b+15TQcBapl4P+8xNqRE4o XmXSTuyfZ3RU3O/SUVACf7IkHbx/Ej1+btQLqXaQQozOJElUdj2du+Hhz63TG1v6 d1LNnLYaljsW7d40lNylJiuVVuB4Uu3ZBfW0ztVSclvsrE2TEMSNYKia/JXXoad1 ifWeUpDP48pdJ7aNmdbvTZDGtXhFcPBzuKvR0iJuiLPEcGrI0GIltEDhiMoBtX4r UrIh2QB/PAPYPYkLkJbQ1HI/dFzfr3zw4RdPyrG7lhI+jk2fubpfyx5n51hNmXVA AqATMj2NTMM=jPaw -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . (CVE-2019-14835) Update instructions: The problem can be corrected by updating your livepatches to the following versions: | Kernel | Version | flavors | |--------------------------+----------+--------------------------| | 4.4.0-148.174 | 56.1 | lowlatency, generic | | 4.4.0-150.176 | 56.1 | generic, lowlatency | | 4.4.0-151.178 | 56.1 | lowlatency, generic | | 4.4.0-154.181 | 56.1 | lowlatency, generic | | 4.4.0-157.185 | 56.1 | lowlatency, generic | | 4.4.0-159.187 | 56.1 | lowlatency, generic | | 4.4.0-161.189 | 56.1 | lowlatency, generic | | 4.15.0-50.54 | 56.1 | generic, lowlatency | | 4.15.0-50.54~16.04.1 | 56.1 | generic, lowlatency | | 4.15.0-51.55 | 56.1 | generic, lowlatency | | 4.15.0-51.55~16.04.1 | 56.1 | generic, lowlatency | | 4.15.0-52.56 | 56.1 | lowlatency, generic | | 4.15.0-52.56~16.04.1 | 56.1 | generic, lowlatency | | 4.15.0-54.58 | 56.1 | generic, lowlatency | | 4.15.0-54.58~16.04.1 | 56.1 | generic, lowlatency | | 4.15.0-55.60 | 56.1 | generic, lowlatency | | 4.15.0-58.64 | 56.1 | generic, lowlatency | | 4.15.0-58.64~16.04.1 | 56.1 | lowlatency, generic | | 4.15.0-60.67 | 56.1 | lowlatency, generic | | 4.15.0-60.67~16.04.1 | 56.1 | generic, lowlatency | | 4.15.0-62.69 | 56.1 | generic, lowlatency | | 4.15.0-62.69~16.04.1 | 56.1 | lowlatency, generic | Support Information: Kernels older than the levels listed below do not receive livepatch updates. Please upgrade your kernel as soon as possible. | Series | Version | Flavors | |------------------+------------------+--------------------------| | Ubuntu 18.04 LTS | 4.15.0-50 | generic lowlatency | | Ubuntu 16.04 LTS | 4.15.0-50 | generic lowlatency | | Ubuntu 14.04 LTS | 4.4.0-148 | generic lowlatency | | Ubuntu 16.04 LTS | 4.4.0-148 | generic lowlatency | References: CVE-2019-14835 -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce . 7) - ppc64le, x86_64 3. Description: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3

Trust: 1.98

sources: NVD: CVE-2019-14835 // VULHUB: VHN-146821 // PACKETSTORM: 154514 // PACKETSTORM: 154606 // PACKETSTORM: 154538 // PACKETSTORM: 154566 // PACKETSTORM: 154562 // PACKETSTORM: 154659 // PACKETSTORM: 154513 // PACKETSTORM: 154607 // PACKETSTORM: 154572 // PACKETSTORM: 154558 // PACKETSTORM: 154539

AFFECTED PRODUCTS

vendor:huaweimodel:manageonescope:eqversion:6.5.1rc1.b060

Trust: 1.0

vendor:linuxmodel:kernelscope:ltversion:4.9.193

Trust: 1.0

vendor:redhatmodel:enterprise linux eusscope:eqversion:7.7

Trust: 1.0

vendor:redhatmodel:enterprise linux server ausscope:eqversion:7.6

Trust: 1.0

vendor:redhatmodel:enterprise linux server ausscope:eqversion:7.2

Trust: 1.0

vendor:redhatmodel:enterprise linux serverscope:eqversion:7.0

Trust: 1.0

vendor:huaweimodel:manageonescope:eqversion:6.5.rc2.b050

Trust: 1.0

vendor:netappmodel:h300escope:eqversion: -

Trust: 1.0

vendor:linuxmodel:kernelscope:gteversion:4.14

Trust: 1.0

vendor:redhatmodel:enterprise linux workstationscope:eqversion:7.0

Trust: 1.0

vendor:netappmodel:h610sscope:eqversion: -

Trust: 1.0

vendor:netappmodel:service processorscope:eqversion: -

Trust: 1.0

vendor:redhatmodel:enterprise linux server tusscope:eqversion:7.2

Trust: 1.0

vendor:redhatmodel:enterprise linux for real timescope:eqversion:7

Trust: 1.0

vendor:redhatmodel:enterprise linux server tusscope:eqversion:7.7

Trust: 1.0

vendor:redhatmodel:virtualizationscope:eqversion:4.0

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:12.04

Trust: 1.0

vendor:netappmodel:h300sscope:eqversion: -

Trust: 1.0

vendor:linuxmodel:kernelscope:ltversion:4.4.193

Trust: 1.0

vendor:redhatmodel:enterprise linux server ausscope:eqversion:7.4

Trust: 1.0

vendor:netappmodel:steelstore cloud integrated storagescope:eqversion: -

Trust: 1.0

vendor:linuxmodel:kernelscope:gteversion:2.6.34

Trust: 1.0

vendor:huaweimodel:imanager netecoscope:eqversion:v600r009c10spc200

Trust: 1.0

vendor:huaweimodel:manageonescope:eqversion:6.5.1rc1.b080

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:14.04

Trust: 1.0

vendor:redhatmodel:enterprise linux server tusscope:eqversion:7.3

Trust: 1.0

vendor:redhatmodel:enterprise linux eusscope:eqversion:7.6

Trust: 1.0

vendor:redhatmodel:enterprise linux server ausscope:eqversion:6.6

Trust: 1.0

vendor:debianmodel:linuxscope:eqversion:9.0

Trust: 1.0

vendor:netappmodel:aff a700sscope:eqversion: -

Trust: 1.0

vendor:debianmodel:linuxscope:eqversion:8.0

Trust: 1.0

vendor:netappmodel:h500escope:eqversion: -

Trust: 1.0

vendor:redhatmodel:enterprise linuxscope:eqversion:8.0

Trust: 1.0

vendor:redhatmodel:enterprise linux workstationscope:eqversion:6.0

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:16.04

Trust: 1.0

vendor:linuxmodel:kernelscope:gteversion:5.2

Trust: 1.0

vendor:redhatmodel:enterprise linux server ausscope:eqversion:6.5

Trust: 1.0

vendor:netappmodel:h500sscope:eqversion: -

Trust: 1.0

vendor:netappmodel:solidfirescope:eqversion: -

Trust: 1.0

vendor:huaweimodel:imanager netecoscope:eqversion:v600r009c00

Trust: 1.0

vendor:redhatmodel:enterprise linux desktopscope:eqversion:6.0

Trust: 1.0

vendor:linuxmodel:kernelscope:ltversion:4.14.144

Trust: 1.0

vendor:fedoraprojectmodel:fedorascope:eqversion:30

Trust: 1.0

vendor:huaweimodel:manageonescope:eqversion:6.5.0

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:18.04

Trust: 1.0

vendor:redhatmodel:enterprise linux server tusscope:eqversion:7.6

Trust: 1.0

vendor:linuxmodel:kernelscope:gteversion:4.19

Trust: 1.0

vendor:redhatmodel:openshift container platformscope:eqversion:3.11

Trust: 1.0

vendor:fedoraprojectmodel:fedorascope:eqversion:29

Trust: 1.0

vendor:huaweimodel:imanager neteco 6000scope:eqversion:v600r008c20

Trust: 1.0

vendor:huaweimodel:imanager neteco 6000scope:eqversion:v600r008c10spc300

Trust: 1.0

vendor:redhatmodel:enterprise linux server ausscope:eqversion:7.7

Trust: 1.0

vendor:debianmodel:linuxscope:eqversion:10.0

Trust: 1.0

vendor:linuxmodel:kernelscope:ltversion:4.19.73

Trust: 1.0

vendor:redhatmodel:enterprise linux eusscope:eqversion:7.5

Trust: 1.0

vendor:netappmodel:h700escope:eqversion: -

Trust: 1.0

vendor:opensusemodel:leapscope:eqversion:15.1

Trust: 1.0

vendor:netappmodel:h410cscope:eqversion: -

Trust: 1.0

vendor:redhatmodel:enterprise linux desktopscope:eqversion:7.0

Trust: 1.0

vendor:linuxmodel:kernelscope:ltversion:5.2.15

Trust: 1.0

vendor:netappmodel:h410sscope:eqversion: -

Trust: 1.0

vendor:linuxmodel:kernelscope:gteversion:4.9

Trust: 1.0

vendor:netappmodel:data availability servicesscope:eqversion: -

Trust: 1.0

vendor:redhatmodel:enterprise linux for real timescope:eqversion:8

Trust: 1.0

vendor:netappmodel:h700sscope:eqversion: -

Trust: 1.0

vendor:linuxmodel:kernelscope:eqversion:5.3

Trust: 1.0

vendor:redhatmodel:enterprise linux server ausscope:eqversion:7.3

Trust: 1.0

vendor:redhatmodel:enterprise linux server tusscope:eqversion:7.4

Trust: 1.0

vendor:linuxmodel:kernelscope:gteversion:4.4

Trust: 1.0

vendor:linuxmodel:kernelscope:ltversion:3.16.74

Trust: 1.0

vendor:canonicalmodel:ubuntu linuxscope:eqversion:19.04

Trust: 1.0

vendor:opensusemodel:leapscope:eqversion:15.0

Trust: 1.0

vendor:redhatmodel:virtualization hostscope:eqversion:4.0

Trust: 1.0

vendor:huaweimodel:manageonescope:eqversion:6.5.0.spc100.b210

Trust: 1.0

vendor:netappmodel:hci management nodescope:eqversion: -

Trust: 1.0

vendor:redhatmodel:enterprise linux serverscope:eqversion:6.0

Trust: 1.0

vendor:redhatmodel:enterprise linux serverscope:eqversion:7.6

Trust: 1.0

sources: NVD: CVE-2019-14835

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2019-14835
value: HIGH

Trust: 1.0

secalert@redhat.com: CVE-2019-14835
value: HIGH

Trust: 1.0

VULHUB: VHN-146821
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2019-14835
severity: HIGH
baseScore: 7.2
vectorString: AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-146821
severity: HIGH
baseScore: 7.2
vectorString: AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2019-14835
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

secalert@redhat.com: CVE-2019-14835
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: HIGH
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 0.6
impactScore: 6.0
version: 3.0

Trust: 1.0

sources: VULHUB: VHN-146821 // NVD: CVE-2019-14835 // NVD: CVE-2019-14835

PROBLEMTYPE DATA

problemtype:CWE-120

Trust: 1.1

sources: VULHUB: VHN-146821 // NVD: CVE-2019-14835

THREAT TYPE

local

Trust: 0.2

sources: PACKETSTORM: 154514 // PACKETSTORM: 154513

TYPE

overflow

Trust: 0.7

sources: PACKETSTORM: 154538 // PACKETSTORM: 154566 // PACKETSTORM: 154562 // PACKETSTORM: 154659 // PACKETSTORM: 154607 // PACKETSTORM: 154558 // PACKETSTORM: 154539

EXTERNAL IDS

db:NVDid:CVE-2019-14835

Trust: 2.2

db:PACKETSTORMid:154572

Trust: 1.2

db:PACKETSTORMid:155212

Trust: 1.1

db:PACKETSTORMid:154951

Trust: 1.1

db:OPENWALLid:OSS-SECURITY/2019/10/03/1

Trust: 1.1

db:OPENWALLid:OSS-SECURITY/2019/10/09/7

Trust: 1.1

db:OPENWALLid:OSS-SECURITY/2019/09/24/1

Trust: 1.1

db:OPENWALLid:OSS-SECURITY/2019/10/09/3

Trust: 1.1

db:OPENWALLid:OSS-SECURITY/2019/09/17/1

Trust: 1.1

db:PACKETSTORMid:154539

Trust: 0.2

db:PACKETSTORMid:154538

Trust: 0.2

db:PACKETSTORMid:154513

Trust: 0.2

db:PACKETSTORMid:154562

Trust: 0.2

db:PACKETSTORMid:154514

Trust: 0.2

db:PACKETSTORMid:154566

Trust: 0.2

db:PACKETSTORMid:154558

Trust: 0.2

db:PACKETSTORMid:154659

Trust: 0.2

db:PACKETSTORMid:154570

Trust: 0.1

db:PACKETSTORMid:154602

Trust: 0.1

db:PACKETSTORMid:154563

Trust: 0.1

db:PACKETSTORMid:154564

Trust: 0.1

db:PACKETSTORMid:154540

Trust: 0.1

db:PACKETSTORMid:154565

Trust: 0.1

db:PACKETSTORMid:154541

Trust: 0.1

db:PACKETSTORMid:154585

Trust: 0.1

db:PACKETSTORMid:154569

Trust: 0.1

db:CNNVDid:CNNVD-201909-807

Trust: 0.1

db:VULHUBid:VHN-146821

Trust: 0.1

db:PACKETSTORMid:154606

Trust: 0.1

db:PACKETSTORMid:154607

Trust: 0.1

sources: VULHUB: VHN-146821 // PACKETSTORM: 154514 // PACKETSTORM: 154606 // PACKETSTORM: 154538 // PACKETSTORM: 154566 // PACKETSTORM: 154562 // PACKETSTORM: 154659 // PACKETSTORM: 154513 // PACKETSTORM: 154607 // PACKETSTORM: 154572 // PACKETSTORM: 154558 // PACKETSTORM: 154539 // NVD: CVE-2019-14835

REFERENCES

url:https://access.redhat.com/errata/rhsa-2019:2827

Trust: 1.2

url:https://access.redhat.com/errata/rhsa-2019:2828

Trust: 1.2

url:https://access.redhat.com/errata/rhsa-2019:2854

Trust: 1.2

url:https://access.redhat.com/errata/rhsa-2019:2862

Trust: 1.2

url:https://access.redhat.com/errata/rhsa-2019:2864

Trust: 1.2

url:https://access.redhat.com/errata/rhsa-2019:2899

Trust: 1.2

url:https://access.redhat.com/errata/rhsa-2019:2924

Trust: 1.2

url:https://seclists.org/bugtraq/2019/sep/41

Trust: 1.1

url:https://seclists.org/bugtraq/2019/nov/11

Trust: 1.1

url:https://www.debian.org/security/2019/dsa-4531

Trust: 1.1

url:https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/yw3qnmpenpfegvtofpsnobl7jeijs25p/

Trust: 1.1

url:https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/kqfy6jyfiq2vfq7qcsxpwtul5zdncjl5/

Trust: 1.1

url:https://access.redhat.com/errata/rhba-2019:2824

Trust: 1.1

url:https://access.redhat.com/errata/rhsa-2019:2829

Trust: 1.1

url:https://access.redhat.com/errata/rhsa-2019:2830

Trust: 1.1

url:https://access.redhat.com/errata/rhsa-2019:2863

Trust: 1.1

url:https://access.redhat.com/errata/rhsa-2019:2865

Trust: 1.1

url:https://access.redhat.com/errata/rhsa-2019:2866

Trust: 1.1

url:https://access.redhat.com/errata/rhsa-2019:2867

Trust: 1.1

url:https://access.redhat.com/errata/rhsa-2019:2869

Trust: 1.1

url:https://access.redhat.com/errata/rhsa-2019:2889

Trust: 1.1

url:https://access.redhat.com/errata/rhsa-2019:2900

Trust: 1.1

url:https://access.redhat.com/errata/rhsa-2019:2901

Trust: 1.1

url:https://usn.ubuntu.com/4135-1/

Trust: 1.1

url:https://usn.ubuntu.com/4135-2/

Trust: 1.1

url:https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html

Trust: 1.1

url:https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html

Trust: 1.1

url:http://www.openwall.com/lists/oss-security/2019/09/24/1

Trust: 1.1

url:http://www.openwall.com/lists/oss-security/2019/10/03/1

Trust: 1.1

url:http://www.openwall.com/lists/oss-security/2019/10/09/3

Trust: 1.1

url:http://www.openwall.com/lists/oss-security/2019/10/09/7

Trust: 1.1

url:http://packetstormsecurity.com/files/154572/kernel-live-patch-security-notice-lsn-0056-1.html

Trust: 1.1

url:http://packetstormsecurity.com/files/154951/kernel-live-patch-security-notice-lsn-0058-1.html

Trust: 1.1

url:http://packetstormsecurity.com/files/155212/slackware-security-advisory-slackware-14.2-kernel-updates.html

Trust: 1.1

url:http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-qemu-en

Trust: 1.1

url:https://bugzilla.redhat.com/show_bug.cgi?id=cve-2019-14835

Trust: 1.1

url:https://security.netapp.com/advisory/ntap-20191031-0005/

Trust: 1.1

url:https://www.openwall.com/lists/oss-security/2019/09/17/1

Trust: 1.1

url:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

Trust: 1.1

url:http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

Trust: 1.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-14835

Trust: 1.1

url:https://www.redhat.com/mailman/listinfo/rhsa-announce

Trust: 0.7

url:https://access.redhat.com/security/vulnerabilities/kernel-vhost

Trust: 0.7

url:https://access.redhat.com/security/cve/cve-2019-14835

Trust: 0.7

url:https://bugzilla.redhat.com/):

Trust: 0.7

url:https://access.redhat.com/security/team/key/

Trust: 0.7

url:https://access.redhat.com/security/team/contact/

Trust: 0.7

url:https://access.redhat.com/security/updates/classification/#important

Trust: 0.7

url:https://access.redhat.com/articles/11258

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2019-15030

Trust: 0.2

url:https://usn.ubuntu.com/4135-1

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-15031

Trust: 0.2

url:https://launchpad.net/ubuntu/+source/linux-hwe/5.0.0-29.31~18.04.1

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-raspi2/4.4.0-1122.131

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-kvm/5.0.0-1017.18

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-azure/4.15.0-1059.64

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-gcp/4.15.0-1044.46

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-gcp/5.0.0-1017.17

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-raspi2/5.0.0-1017.17

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux/5.0.0-29.31

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-aws/4.4.0-1094.105

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-aws-hwe/4.15.0-1050.52~16.04.1

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-gke-4.15/4.15.0-1044.46

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-raspi2/4.15.0-1047.51

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-aws/4.15.0-1050.52

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux/4.15.0-64.73

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-oracle/4.15.0-1025.28~16.04.1

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-azure/5.0.0-1020.21~18.04.1

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-snapdragon/5.0.0-1021.22

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-aws/5.0.0-1016.18

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-kvm/4.4.0-1058.65

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-snapdragon/4.4.0-1126.132

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-oem/4.15.0-1056.65

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-kvm/4.15.0-1046.46

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-gke-5.0/5.0.0-1017.17~18.04.1

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-oracle/4.15.0-1025.28

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-gcp/4.15.0-1044.70

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux/4.4.0-164.192

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-snapdragon/4.15.0-1064.71

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-azure/5.0.0-1020.21

Trust: 0.1

url:https://launchpad.net/ubuntu/+source/linux-hwe/4.15.0-64.73~16.04.1

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-15117

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-14821

Trust: 0.1

url:https://www.debian.org/security/faq

Trust: 0.1

url:https://security-tracker.debian.org/tracker/linux

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-15118

Trust: 0.1

url:https://www.debian.org/security/

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-15902

Trust: 0.1

url:https://access.redhat.com/articles/2974891

Trust: 0.1

url:https://usn.ubuntu.com/4135-2

Trust: 0.1

url:https://access.redhat.com/security/cve/cve-2019-1125

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-1125

Trust: 0.1

url:https://access.redhat.com/articles/4329821

Trust: 0.1

url:https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

Trust: 0.1

sources: VULHUB: VHN-146821 // PACKETSTORM: 154514 // PACKETSTORM: 154606 // PACKETSTORM: 154538 // PACKETSTORM: 154566 // PACKETSTORM: 154562 // PACKETSTORM: 154659 // PACKETSTORM: 154513 // PACKETSTORM: 154607 // PACKETSTORM: 154572 // PACKETSTORM: 154558 // PACKETSTORM: 154539 // NVD: CVE-2019-14835

CREDITS

Red Hat

Trust: 0.7

sources: PACKETSTORM: 154538 // PACKETSTORM: 154566 // PACKETSTORM: 154562 // PACKETSTORM: 154659 // PACKETSTORM: 154607 // PACKETSTORM: 154558 // PACKETSTORM: 154539

SOURCES

db:VULHUBid:VHN-146821
db:PACKETSTORMid:154514
db:PACKETSTORMid:154606
db:PACKETSTORMid:154538
db:PACKETSTORMid:154566
db:PACKETSTORMid:154562
db:PACKETSTORMid:154659
db:PACKETSTORMid:154513
db:PACKETSTORMid:154607
db:PACKETSTORMid:154572
db:PACKETSTORMid:154558
db:PACKETSTORMid:154539
db:NVDid:CVE-2019-14835

LAST UPDATE DATE

2024-09-17T21:12:30.001000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-146821date:2023-02-12T00:00:00
db:NVDid:CVE-2019-14835date:2023-12-15T15:29:09.587

SOURCES RELEASE DATE

db:VULHUBid:VHN-146821date:2019-09-17T00:00:00
db:PACKETSTORMid:154514date:2019-09-18T21:22:40
db:PACKETSTORMid:154606date:2019-09-25T18:06:37
db:PACKETSTORMid:154538date:2019-09-20T14:57:38
db:PACKETSTORMid:154566date:2019-09-23T18:26:27
db:PACKETSTORMid:154562date:2019-09-23T18:25:39
db:PACKETSTORMid:154659date:2019-09-30T04:44:44
db:PACKETSTORMid:154513date:2019-09-18T21:22:34
db:PACKETSTORMid:154607date:2019-09-25T18:06:46
db:PACKETSTORMid:154572date:2019-09-23T18:31:46
db:PACKETSTORMid:154558date:2019-09-21T18:10:56
db:PACKETSTORMid:154539date:2019-09-20T14:57:46
db:NVDid:CVE-2019-14835date:2019-09-17T16:15:10.980