CVE-2019-3701

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dlc field. The privileged user "root" with CAP_NET_ADMIN can create a CAN frame modification rule that makes the data length code a higher value than the available CAN frame data size. In combination with a configured checksum calculation where the result is stored relatively to the end of the data (e.g. cgw_csum_xor_rel) the tail of the skb (e.g. frag_list pointer in skb_shared_info) can be rewritten which finally can cause a system crash. Because of a missing check, the CAN drivers may write arbitrary content beyond the data registers in the CAN controller's I/O memory when processing can-gw manipulated outgoing frames.

References

http://www.securityfocus.com/bid/106443

https://bugzilla.suse.com/show_bug.cgi?id=1120386

https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=0aaa81377c5a01f686bcdb8c7a6929a7bf330c68

https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html

https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html

https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html

https://marc.info/?l=linux-netdev&m=154651842302479&w=2

https://marc.info/?l=linux-netdev&m=154661373531512&w=2

https://support.f5.com/csp/article/K17957133

https://usn.ubuntu.com/3932-1/

https://usn.ubuntu.com/3932-2/

https://usn.ubuntu.com/4115-1/

https://usn.ubuntu.com/4118-1/

Details

Source: MITRE

Published: 2019-01-03

Updated: 2019-09-03

Type: CWE-787

Risk Information

CVSS v2

Base Score: 4.9

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Impact Score: 6.9

Exploitability Score: 3.9

Severity: MEDIUM

CVSS v3

Base Score: 4.4

Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 0.8

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 4.19.13 (inclusive)

Configuration 2

OR

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Configuration 3

OR

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Tenable Plugins

View all (32 total)

IDNameProductFamilySeverity
145201EulerOS 2.0 SP3 : kernel (EulerOS-SA-2021-1079)NessusHuawei Local Security Checks
high
138272SUSE SLES15 Security Update : kernel (SUSE-SU-2020:1663-1)NessusSuSE Local Security Checks
critical
136782SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1275-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)NessusSuSE Local Security Checks
critical
136661SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1255-1)NessusSuSE Local Security Checks
critical
136168SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:1146-1)NessusSuSE Local Security Checks
high
136166SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1142-1)NessusSuSE Local Security Checks
high
136165SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1141-1)NessusSuSE Local Security Checks
high
136075SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:1123-1)NessusSuSE Local Security Checks
high
136026SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1119-1)NessusSuSE Local Security Checks
high
136025SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1118-1)NessusSuSE Local Security Checks
high
136006openSUSE Security Update : the Linux Kernel (openSUSE-2020-543)NessusSuSE Local Security Checks
high
134387EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1186)NessusHuawei Local Security Checks
critical
128680Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel regression (USN-4115-2)NessusUbuntu Local Security Checks
critical
128478Ubuntu 16.04 LTS / 18.04 LTS : linux-aws vulnerabilities (USN-4118-1)NessusUbuntu Local Security Checks
critical
128475Ubuntu 16.04 LTS / 18.04 LTS : linux, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, (USN-4115-1)NessusUbuntu Local Security Checks
critical
124972EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1519)NessusHuawei Local Security Checks
high
124834EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1512)NessusHuawei Local Security Checks
high
124637OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0014)NessusOracleVM Local Security Checks
medium
124595Debian DLA-1771-1 : linux-4.9 security updateNessusDebian Local Security Checks
medium
124048Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2019-4612)NessusOracle Linux Local Security Checks
high
123961Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4600)NessusOracle Linux Local Security Checks
medium
123727EulerOS Virtualization 2.5.3 : kernel (EulerOS-SA-2019-1259)NessusHuawei Local Security Checks
high
123702EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1234)NessusHuawei Local Security Checks
medium
123681Ubuntu 14.04 LTS : linux-lts-xenial, linux-aws vulnerabilities (USN-3932-2)NessusUbuntu Local Security Checks
medium
123680Ubuntu 16.04 LTS : linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities (USN-3932-1)NessusUbuntu Local Security Checks
medium
123631Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4596)NessusOracle Linux Local Security Checks
medium
123605EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-1131)NessusHuawei Local Security Checks
medium
123420Debian DLA-1731-2 : linux regression update (Spectre)NessusDebian Local Security Checks
medium
122201EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1028)NessusHuawei Local Security Checks
high
121505Slackware 14.2 : Slackware 14.2 kernel (SSA:2019-030-01)NessusSlackware Local Security Checks
high
121171Fedora 29 : kernel / kernel-headers / kernel-tools (2019-b0f7a7b74b)NessusFedora Local Security Checks
medium
121170Fedora 28 : kernel / kernel-headers / kernel-tools (2019-337484d88b)NessusFedora Local Security Checks
medium