CVE-2019-19767 (Medium) detected in linuxlinux-4.19.238, linuxlinux-4.19.238 - autoclosed

[mend-bolt-for-github[bot]]

CVE-2019-19767 - Medium Severity Vulnerability

Vulnerable Libraries - linuxlinux-4.19.238, linuxlinux-4.19.238

Vulnerability Details

The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.

Publish Date: 2019-12-12

URL: CVE-2019-19767

CVSS 3 Score Details (5.5)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: None - User Interaction: Required - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://www.linuxkernelcves.com/cves/CVE-2019-19767

Release Date: 2020-01-03

Fix Resolution: v5.5-rc1,v3.16.81,v4.14.158,v4.19.88,v4.4.211,v4.9.211,v5.3.15,v5.4.2

---

Step up your Open Source Security Game with Mend here

[mend-bolt-for-github[bot]]

:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.

[mend-bolt-for-github[bot]]

:information_source: This issue was automatically re-opened by Mend because the vulnerable library in the specific branch(es) has been detected in the Mend inventory.

[mend-bolt-for-github[bot]]

:heavy_check_mark: This issue was automatically closed by Mend because the vulnerable library in the specific branch(es) was either marked as ignored or it is no longer part of the Mend inventory.