CVE-2019-14284
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-14284
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Next, the floppy format operation should be called. It can be triggered by an unprivileged local user even when a floppy disk has not been inserted. NOTE: QEMU creates the floppy device by default.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 数字错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。 Linux kernel 5.2.3之前版本中的drivers/block/floppy.c文件的‘setup_format_params’函数存在数字错误漏洞。该漏洞源于网络系统或产品未正确计算或转换所产生的数字。攻击者可利用该漏洞导致整数溢出或符号错误等。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2019-14284
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-14284
请登录查看更多情报信息。
- https://security.netapp.com/advisory/ntap-20190905-0002/x_refsource_CONFIRM
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3x_refsource_MISC
- USN-4114-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntuvendor-advisoryx_refsource_UBUNTU
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00056.htmlvendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00055.htmlvendor-advisoryx_refsource_SUSE
- https://nvd.nist.gov/vuln/detail/CVE-2019-14284
Same Patch Batch · n/a · 2019-07-26 · 29 CVEs total
| CVE-2019-13955 | MikroTik RouterOS 资源管理错误漏洞 | |
| CVE-2019-13588 | Wikindx 跨站脚本漏洞 | |
| CVE-2019-10267 | Ahsay Systems Cloud Backup Suite 代码问题漏洞 | |
| CVE-2019-10266 | Ahsay Systems Cloud Backup Suite 代码问题漏洞 | |
| CVE-2019-10265 | Ahsay Systems Cloud Backup Suite 路径遍历漏洞 | |
| CVE-2019-10264 | Ahsay Systems Cloud Backup Suite 代码问题漏洞 | |
| CVE-2019-10263 | Ahsay Systems Cloud Backup Suite 跨站脚本漏洞 | |
| CVE-2019-14228 | Xavier PHP Management Panel 跨站请求伪造漏洞 | |
| CVE-2019-13565 | OpenLDAP 授权问题漏洞 | |
| CVE-2019-13382 | TechSmith SnagIT 权限许可和访问控制问题漏洞 | |
| CVE-2019-14283 | Linux kernel 输入验证错误漏洞 | |
| CVE-2019-13638 | GNU patch 操作系统命令注入漏洞 | |
| CVE-2019-13057 | OpenLDAP 授权问题漏洞 | |
| CVE-2019-13954 | MikroTik RouterOS 资源管理错误漏洞 | |
| CVE-2019-13990 | Terracotta Quartz Scheduler 代码问题漏洞 | |
| CVE-2019-13387 | CentOS Web Panel 跨站脚本漏洞 | |
| CVE-2019-13386 | CentOS Web Panel 权限许可和访问控制问题漏洞 | |
| CVE-2019-13385 | Control Web Panel CentOS Web Panel 路径遍历漏洞 | |
| CVE-2018-20857 | Zendesk Samlr 输入验证错误漏洞 | |
| CVE-2018-20856 | Linux kernel 资源管理错误漏洞 |
Showing top 20 of 29 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2019-14284
No comments yet