CVE-2019-3460

Name
CVE-2019-3460
Description
A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Third Party Advisory https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3460.html
Exploit https://marc.info/?l=oss-security&m=154721580222522&w=2
Patch https://lore.kernel.org/linux-bluetooth/20190110062917.GB15047@kroah.com/
Patch https://git.kernel.org/linus/af3d5d1c87664a4f150fcf3534c6567cb19909b0
Mitigation https://bugzilla.redhat.com/show_bug.cgi?id=1663179
Mailing List https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html
MLIST https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html
MLIST https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html
MLIST http://www.openwall.com/lists/oss-security/2019/06/27/2
MLIST http://www.openwall.com/lists/oss-security/2019/06/27/7
MLIST http://www.openwall.com/lists/oss-security/2019/06/28/1
MLIST http://www.openwall.com/lists/oss-security/2019/06/28/2
REDHAT https://access.redhat.com/errata/RHSA-2019:2043
REDHAT https://access.redhat.com/errata/RHSA-2019:2029
MLIST http://www.openwall.com/lists/oss-security/2019/08/12/1
REDHAT https://access.redhat.com/errata/RHSA-2019:3517
REDHAT https://access.redhat.com/errata/RHSA-2019:3309
REDHAT https://access.redhat.com/errata/RHSA-2020:0740

Match rules

CPE URI Source package Min version Max version
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* linux_kernel >= None <= 5.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status