2018-12-31 10:04:59 -05:00
|
|
|
{
|
2019-04-11 16:00:42 +00:00
|
|
|
"data_type": "CVE",
|
|
|
|
|
"data_format": "MITRE",
|
|
|
|
|
"data_version": "4.0",
|
2019-03-18 01:58:53 +00:00
|
|
|
"CVE_data_meta": {
|
|
|
|
|
"ID": "CVE-2019-3460",
|
2019-04-11 16:00:42 +00:00
|
|
|
"ASSIGNER": "security@debian.org",
|
|
|
|
|
"STATE": "PUBLIC"
|
|
|
|
|
},
|
|
|
|
|
"affects": {
|
|
|
|
|
"vendor": {
|
|
|
|
|
"vendor_data": [
|
|
|
|
|
{
|
|
|
|
|
"vendor_name": "Linux",
|
|
|
|
|
"product": {
|
|
|
|
|
"product_data": [
|
|
|
|
|
{
|
|
|
|
|
"product_name": "Linux",
|
|
|
|
|
"version": {
|
|
|
|
|
"version_data": [
|
|
|
|
|
{
|
|
|
|
|
"version_value": "before 5.1-rc1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"version_value": "fixed in 5.1-rc1"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"problemtype": {
|
|
|
|
|
"problemtype_data": [
|
|
|
|
|
{
|
|
|
|
|
"description": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "eng",
|
|
|
|
|
"value": "information leak"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"references": {
|
|
|
|
|
"reference_data": [
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MLIST",
|
|
|
|
|
"name": "[oss-security] 20190111 Linux kernel: Bluetooth: two remote infoleaks (CVE-2019-3459, CVE-2019-3460)",
|
|
|
|
|
"url": "https://marc.info/?l=oss-security&m=154721580222522&w=2"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MLIST",
|
|
|
|
|
"name": "[linux-bluetooth] 20190110 [PATCH 2/2] Bluetooth: check the buffer size for some messages before parsing",
|
|
|
|
|
"url": "https://lore.kernel.org/linux-bluetooth/20190110062917.GB15047@kroah.com/"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "CONFIRM",
|
|
|
|
|
"name": "https://git.kernel.org/linus/af3d5d1c87664a4f150fcf3534c6567cb19909b0",
|
|
|
|
|
"url": "https://git.kernel.org/linus/af3d5d1c87664a4f150fcf3534c6567cb19909b0"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "CONFIRM",
|
|
|
|
|
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1663179",
|
|
|
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1663179"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "CONFIRM",
|
|
|
|
|
"name": "https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3460.html",
|
|
|
|
|
"url": "https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-3460.html"
|
2019-05-03 12:00:52 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MLIST",
|
|
|
|
|
"name": "[debian-lts-announce] 20190503 [SECURITY] [DLA 1771-1] linux-4.9 security update",
|
|
|
|
|
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html"
|
2019-05-28 18:00:49 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MLIST",
|
|
|
|
|
"name": "[debian-lts-announce] 20190528 [SECURITY] [DLA 1799-1] linux security update",
|
|
|
|
|
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00041.html"
|
2019-05-28 19:00:49 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MLIST",
|
|
|
|
|
"name": "[debian-lts-announce] 20190528 [SECURITY] [DLA 1799-2] linux security update",
|
|
|
|
|
"url": "https://lists.debian.org/debian-lts-announce/2019/05/msg00042.html"
|
2019-06-27 18:00:58 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MLIST",
|
|
|
|
|
"name": "[oss-security] 20190627 Re: linux-distros membership application - Microsoft",
|
|
|
|
|
"url": "http://www.openwall.com/lists/oss-security/2019/06/27/2"
|
2019-06-27 21:01:03 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MLIST",
|
|
|
|
|
"name": "[oss-security] 20190627 Re: linux-distros membership application - Microsoft",
|
|
|
|
|
"url": "http://www.openwall.com/lists/oss-security/2019/06/27/7"
|
2019-06-28 15:01:06 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MLIST",
|
|
|
|
|
"name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
|
|
|
|
|
"url": "http://www.openwall.com/lists/oss-security/2019/06/28/1"
|
2019-06-28 21:00:58 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MLIST",
|
|
|
|
|
"name": "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
|
|
|
|
|
"url": "http://www.openwall.com/lists/oss-security/2019/06/28/2"
|
2019-08-06 17:00:50 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2019:2043",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2019:2043"
|
2019-08-06 17:01:08 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2019:2029",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2019:2029"
|
2019-08-12 06:00:57 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "MLIST",
|
|
|
|
|
"name": "[oss-security] 20190811 Re: linux-distros membership application - Microsoft",
|
|
|
|
|
"url": "http://www.openwall.com/lists/oss-security/2019/08/12/1"
|
2019-11-06 01:01:23 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2019:3309",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2019:3309"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2019:3517",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2019:3517"
|
2020-03-11 12:01:25 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"refsource": "REDHAT",
|
|
|
|
|
"name": "RHSA-2020:0740",
|
|
|
|
|
"url": "https://access.redhat.com/errata/RHSA-2020:0740"
|
2019-04-11 16:00:42 +00:00
|
|
|
}
|
|
|
|
|
]
|
2019-03-18 01:58:53 +00:00
|
|
|
},
|
|
|
|
|
"description": {
|
|
|
|
|
"description_data": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "eng",
|
2019-04-11 16:00:42 +00:00
|
|
|
"value": "A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1."
|
2019-03-18 01:58:53 +00:00
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
