CVE-2019-3701Out-of-bounds Write in Linux

CWE-787Out-of-bounds Write18 documents8 sources
Severity
4.4MEDIUMNVD
OSV7.0OSV4.6OSV3.3
EPSS
0.1%
top 82.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 3
Latest updateMay 14

Description

An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dlc field. The privileged user "root" with CAP_NET_ADMIN can create a CAN frame modification rule that makes the data length code a higher value than the available CAN frame data size. In combination with a configured checksum calculation where the result is stored relatively to the end of the data (e.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.8 | Impact: 3.6

Affected Packages4 packages

Debianlinux/linux_kernel< 4.19.20-1+3
Ubuntulinux/linux_kernel< 4.4.0-145.171+2
NVDlinux/linux_kernel4.19.13
debiandebian/linux< linux 4.19.20-1 (bookworm)

Also affects: Debian Linux 8.0, Ubuntu Linux 14.04, 16.04

Patches

🔴Vulnerability Details

8
GHSA
GHSA-28gp-589x-6r7f: An issue was discovered in can_can_gw_rcv in net/can/gw2022-05-14
OSV
linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2 regression2019-09-11
OSV
linux, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2 vulnerabilities2019-09-02
OSV
linux-aws vulnerabilities2019-09-02
OSV
linux-lts-xenial, linux-aws vulnerabilities2019-04-02

📋Vendor Advisories

7
Ubuntu
Linux kernel regression2019-09-11
Ubuntu
Linux kernel (AWS) vulnerabilities2019-09-02
Ubuntu
Linux kernel vulnerabilities2019-09-02
Ubuntu
Linux kernel vulnerabilities2019-04-02
Ubuntu
Linux kernel (Xenial HWE) vulnerabilities2019-04-02

💬Community

2
Bugzilla
CVE-2019-3701 kernel: Missing check in net/can/gw.c:can_can_gw_rcv() allows for crash by users with CAP_NET_ADMIN [fedora-all]2019-01-07
Bugzilla
CVE-2019-3701 kernel: Missing check in net/can/gw.c:can_can_gw_rcv() allows for crash by users with CAP_NET_ADMIN2019-01-07