Back to the CVE list
CVE-2019-13272 CISA KEV · Actively exploited

kernel: broken permission and object lifetime handling for PTRACE_TRACEME

CVSS score

7.8

EPSS probability

%52.2

Risk score

8.1

Published

7 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2019-13272 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

A flaw was found in the way PTRACE_TRACEME functionality was handled in the Linux kernel. The kernel's implementation of ptrace can inadvertently grant elevated permissions to an attacker who can then abuse the relationship between the tracer and the process being traced. This flaw could allow a local, unprivileged user to increase their privileges on the system or cause a denial of service.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2019-13272 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Red Hat7Server-RHELALT-7.6:kernel-0:4.14.0-115.12.1.el7a.ppc64le View
2Red Hat7Server-RHELALT-7.6:kernel-abi-whitelists-0:4.14.0-115.12.1.el7a.noarch View
3Red Hat7Server-RHELALT-7.6:kernel-alt-0:4.14.0-115.12.1.el7a.src View
4Red Hat7Server-RHELALT-7.6:kernel-bootwrapper-0:4.14.0-115.12.1.el7a.ppc64le View
5Red Hat7Server-RHELALT-7.6:kernel-debug-0:4.14.0-115.12.1.el7a.ppc64le View
6Red Hat7Server-RHELALT-7.6:kernel-debug-debuginfo-0:4.14.0-115.12.1.el7a.ppc64le View
7Red Hat7Server-RHELALT-7.6:kernel-debuginfo-0:4.14.0-115.12.1.el7a.ppc64le View
8Red Hat7Server-RHELALT-7.6:kernel-debuginfo-common-ppc64le-0:4.14.0-115.12.1.el7a.ppc64le View
9Red Hat7Server-RHELALT-7.6:kernel-devel-0:4.14.0-115.12.1.el7a.ppc64le View
10Red Hat7Server-RHELALT-7.6:kernel-doc-0:4.14.0-115.12.1.el7a.noarch View
11Red Hat7Server-RHELALT-7.6:kernel-headers-0:4.14.0-115.12.1.el7a.ppc64le View
12Red Hat7Server-RHELALT-7.6:kernel-tools-0:4.14.0-115.12.1.el7a.ppc64le View
13Red Hat7Server-RHELALT-7.6:kernel-tools-debuginfo-0:4.14.0-115.12.1.el7a.ppc64le View
14Red Hat7Server-RHELALT-7.6:kernel-tools-libs-0:4.14.0-115.12.1.el7a.ppc64le View
15Red Hat7Server-RHELALT-7.6:perf-0:4.14.0-115.12.1.el7a.ppc64le View
16Red Hat7Server-RHELALT-7.6:perf-debuginfo-0:4.14.0-115.12.1.el7a.ppc64le View
17Red Hat7Server-RHELALT-7.6:python-perf-0:4.14.0-115.12.1.el7a.ppc64le View
18Red Hat7Server-RHELALT-7.6:python-perf-debuginfo-0:4.14.0-115.12.1.el7a.ppc64le View
19Red Hat7Server-optional-RHELALT-7.6:kernel-debug-debuginfo-0:4.14.0-115.12.1.el7a.ppc64le View
20Red Hat7Server-optional-RHELALT-7.6:kernel-debug-devel-0:4.14.0-115.12.1.el7a.ppc64le View
21Red Hat7Server-optional-RHELALT-7.6:kernel-debuginfo-0:4.14.0-115.12.1.el7a.ppc64le View
22Red Hat7Server-optional-RHELALT-7.6:kernel-debuginfo-common-ppc64le-0:4.14.0-115.12.1.el7a.ppc64le View
23Red Hat7Server-optional-RHELALT-7.6:kernel-tools-debuginfo-0:4.14.0-115.12.1.el7a.ppc64le View
24Red Hat7Server-optional-RHELALT-7.6:kernel-tools-libs-devel-0:4.14.0-115.12.1.el7a.ppc64le View
25Red Hat7Server-optional-RHELALT-7.6:perf-debuginfo-0:4.14.0-115.12.1.el7a.ppc64le View
26Red Hat7Server-optional-RHELALT-7.6:python-perf-debuginfo-0:4.14.0-115.12.1.el7a.ppc64le View
27Red HatBaseOS-8.0.0.Z:bpftool-0:4.18.0-80.7.2.el8_0.aarch64 View
28Red HatBaseOS-8.0.0.Z:bpftool-0:4.18.0-80.7.2.el8_0.ppc64le View
29Red HatBaseOS-8.0.0.Z:bpftool-0:4.18.0-80.7.2.el8_0.s390x View
30Red HatBaseOS-8.0.0.Z:bpftool-0:4.18.0-80.7.2.el8_0.x86_64 View
31Red HatBaseOS-8.0.0.Z:bpftool-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
32Red HatBaseOS-8.0.0.Z:bpftool-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
33Red HatBaseOS-8.0.0.Z:bpftool-debuginfo-0:4.18.0-80.7.2.el8_0.s390x View
34Red HatBaseOS-8.0.0.Z:bpftool-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
35Red HatBaseOS-8.0.0.Z:kernel-0:4.18.0-80.7.2.el8_0.aarch64 View
36Red HatBaseOS-8.0.0.Z:kernel-0:4.18.0-80.7.2.el8_0.ppc64le View
37Red HatBaseOS-8.0.0.Z:kernel-0:4.18.0-80.7.2.el8_0.s390x View
38Red HatBaseOS-8.0.0.Z:kernel-0:4.18.0-80.7.2.el8_0.src View
39Red HatBaseOS-8.0.0.Z:kernel-0:4.18.0-80.7.2.el8_0.x86_64 View
40Red HatBaseOS-8.0.0.Z:kernel-abi-whitelists-0:4.18.0-80.7.2.el8_0.noarch View
41Red HatBaseOS-8.0.0.Z:kernel-core-0:4.18.0-80.7.2.el8_0.aarch64 View
42Red HatBaseOS-8.0.0.Z:kernel-core-0:4.18.0-80.7.2.el8_0.ppc64le View
43Red HatBaseOS-8.0.0.Z:kernel-core-0:4.18.0-80.7.2.el8_0.s390x View
44Red HatBaseOS-8.0.0.Z:kernel-core-0:4.18.0-80.7.2.el8_0.x86_64 View
45Red HatBaseOS-8.0.0.Z:kernel-debug-0:4.18.0-80.7.2.el8_0.aarch64 View
46Red HatBaseOS-8.0.0.Z:kernel-debug-0:4.18.0-80.7.2.el8_0.ppc64le View
47Red HatBaseOS-8.0.0.Z:kernel-debug-0:4.18.0-80.7.2.el8_0.s390x View
48Red HatBaseOS-8.0.0.Z:kernel-debug-0:4.18.0-80.7.2.el8_0.x86_64 View
49Red HatBaseOS-8.0.0.Z:kernel-debug-core-0:4.18.0-80.7.2.el8_0.aarch64 View
50Red HatBaseOS-8.0.0.Z:kernel-debug-core-0:4.18.0-80.7.2.el8_0.ppc64le View
51Red HatBaseOS-8.0.0.Z:kernel-debug-core-0:4.18.0-80.7.2.el8_0.s390x View
52Red HatBaseOS-8.0.0.Z:kernel-debug-core-0:4.18.0-80.7.2.el8_0.x86_64 View
53Red HatBaseOS-8.0.0.Z:kernel-debug-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
54Red HatBaseOS-8.0.0.Z:kernel-debug-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
55Red HatBaseOS-8.0.0.Z:kernel-debug-debuginfo-0:4.18.0-80.7.2.el8_0.s390x View
56Red HatBaseOS-8.0.0.Z:kernel-debug-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
57Red HatBaseOS-8.0.0.Z:kernel-debug-devel-0:4.18.0-80.7.2.el8_0.aarch64 View
58Red HatBaseOS-8.0.0.Z:kernel-debug-devel-0:4.18.0-80.7.2.el8_0.ppc64le View
59Red HatBaseOS-8.0.0.Z:kernel-debug-devel-0:4.18.0-80.7.2.el8_0.s390x View
60Red HatBaseOS-8.0.0.Z:kernel-debug-devel-0:4.18.0-80.7.2.el8_0.x86_64 View
61Red HatBaseOS-8.0.0.Z:kernel-debug-modules-0:4.18.0-80.7.2.el8_0.aarch64 View
62Red HatBaseOS-8.0.0.Z:kernel-debug-modules-0:4.18.0-80.7.2.el8_0.ppc64le View
63Red HatBaseOS-8.0.0.Z:kernel-debug-modules-0:4.18.0-80.7.2.el8_0.s390x View
64Red HatBaseOS-8.0.0.Z:kernel-debug-modules-0:4.18.0-80.7.2.el8_0.x86_64 View
65Red HatBaseOS-8.0.0.Z:kernel-debug-modules-extra-0:4.18.0-80.7.2.el8_0.aarch64 View
66Red HatBaseOS-8.0.0.Z:kernel-debug-modules-extra-0:4.18.0-80.7.2.el8_0.ppc64le View
67Red HatBaseOS-8.0.0.Z:kernel-debug-modules-extra-0:4.18.0-80.7.2.el8_0.s390x View
68Red HatBaseOS-8.0.0.Z:kernel-debug-modules-extra-0:4.18.0-80.7.2.el8_0.x86_64 View
69Red HatBaseOS-8.0.0.Z:kernel-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
70Red HatBaseOS-8.0.0.Z:kernel-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
71Red HatBaseOS-8.0.0.Z:kernel-debuginfo-0:4.18.0-80.7.2.el8_0.s390x View
72Red HatBaseOS-8.0.0.Z:kernel-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
73Red HatBaseOS-8.0.0.Z:kernel-debuginfo-common-aarch64-0:4.18.0-80.7.2.el8_0.aarch64 View
74Red HatBaseOS-8.0.0.Z:kernel-debuginfo-common-ppc64le-0:4.18.0-80.7.2.el8_0.ppc64le View
75Red HatBaseOS-8.0.0.Z:kernel-debuginfo-common-s390x-0:4.18.0-80.7.2.el8_0.s390x View
76Red HatBaseOS-8.0.0.Z:kernel-debuginfo-common-x86_64-0:4.18.0-80.7.2.el8_0.x86_64 View
77Red HatBaseOS-8.0.0.Z:kernel-devel-0:4.18.0-80.7.2.el8_0.aarch64 View
78Red HatBaseOS-8.0.0.Z:kernel-devel-0:4.18.0-80.7.2.el8_0.ppc64le View
79Red HatBaseOS-8.0.0.Z:kernel-devel-0:4.18.0-80.7.2.el8_0.s390x View
80Red HatBaseOS-8.0.0.Z:kernel-devel-0:4.18.0-80.7.2.el8_0.x86_64 View
81Red HatBaseOS-8.0.0.Z:kernel-doc-0:4.18.0-80.7.2.el8_0.noarch View
82Red HatBaseOS-8.0.0.Z:kernel-modules-0:4.18.0-80.7.2.el8_0.aarch64 View
83Red HatBaseOS-8.0.0.Z:kernel-modules-0:4.18.0-80.7.2.el8_0.ppc64le View
84Red HatBaseOS-8.0.0.Z:kernel-modules-0:4.18.0-80.7.2.el8_0.s390x View
85Red HatBaseOS-8.0.0.Z:kernel-modules-0:4.18.0-80.7.2.el8_0.x86_64 View
86Red HatBaseOS-8.0.0.Z:kernel-modules-extra-0:4.18.0-80.7.2.el8_0.aarch64 View
87Red HatBaseOS-8.0.0.Z:kernel-modules-extra-0:4.18.0-80.7.2.el8_0.ppc64le View
88Red HatBaseOS-8.0.0.Z:kernel-modules-extra-0:4.18.0-80.7.2.el8_0.s390x View
89Red HatBaseOS-8.0.0.Z:kernel-modules-extra-0:4.18.0-80.7.2.el8_0.x86_64 View
90Red HatBaseOS-8.0.0.Z:kernel-tools-0:4.18.0-80.7.2.el8_0.aarch64 View
91Red HatBaseOS-8.0.0.Z:kernel-tools-0:4.18.0-80.7.2.el8_0.ppc64le View
92Red HatBaseOS-8.0.0.Z:kernel-tools-0:4.18.0-80.7.2.el8_0.s390x View
93Red HatBaseOS-8.0.0.Z:kernel-tools-0:4.18.0-80.7.2.el8_0.x86_64 View
94Red HatBaseOS-8.0.0.Z:kernel-tools-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
95Red HatBaseOS-8.0.0.Z:kernel-tools-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
96Red HatBaseOS-8.0.0.Z:kernel-tools-debuginfo-0:4.18.0-80.7.2.el8_0.s390x View
97Red HatBaseOS-8.0.0.Z:kernel-tools-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
98Red HatBaseOS-8.0.0.Z:kernel-tools-libs-0:4.18.0-80.7.2.el8_0.aarch64 View
99Red HatBaseOS-8.0.0.Z:kernel-tools-libs-0:4.18.0-80.7.2.el8_0.ppc64le View
100Red HatBaseOS-8.0.0.Z:kernel-tools-libs-0:4.18.0-80.7.2.el8_0.x86_64 View
101Red HatBaseOS-8.0.0.Z:kernel-zfcpdump-0:4.18.0-80.7.2.el8_0.s390x View
102Red HatBaseOS-8.0.0.Z:kernel-zfcpdump-core-0:4.18.0-80.7.2.el8_0.s390x View
103Red HatBaseOS-8.0.0.Z:kernel-zfcpdump-debuginfo-0:4.18.0-80.7.2.el8_0.s390x View
104Red HatBaseOS-8.0.0.Z:kernel-zfcpdump-devel-0:4.18.0-80.7.2.el8_0.s390x View
105Red HatBaseOS-8.0.0.Z:kernel-zfcpdump-modules-0:4.18.0-80.7.2.el8_0.s390x View
106Red HatBaseOS-8.0.0.Z:kernel-zfcpdump-modules-extra-0:4.18.0-80.7.2.el8_0.s390x View
107Red HatBaseOS-8.0.0.Z:perf-0:4.18.0-80.7.2.el8_0.aarch64 View
108Red HatBaseOS-8.0.0.Z:perf-0:4.18.0-80.7.2.el8_0.ppc64le View
109Red HatBaseOS-8.0.0.Z:perf-0:4.18.0-80.7.2.el8_0.s390x View
110Red HatBaseOS-8.0.0.Z:perf-0:4.18.0-80.7.2.el8_0.x86_64 View
111Red HatBaseOS-8.0.0.Z:perf-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
112Red HatBaseOS-8.0.0.Z:perf-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
113Red HatBaseOS-8.0.0.Z:perf-debuginfo-0:4.18.0-80.7.2.el8_0.s390x View
114Red HatBaseOS-8.0.0.Z:perf-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
115Red HatBaseOS-8.0.0.Z:python3-perf-0:4.18.0-80.7.2.el8_0.aarch64 View
116Red HatBaseOS-8.0.0.Z:python3-perf-0:4.18.0-80.7.2.el8_0.ppc64le View
117Red HatBaseOS-8.0.0.Z:python3-perf-0:4.18.0-80.7.2.el8_0.s390x View
118Red HatBaseOS-8.0.0.Z:python3-perf-0:4.18.0-80.7.2.el8_0.x86_64 View
119Red HatBaseOS-8.0.0.Z:python3-perf-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
120Red HatBaseOS-8.0.0.Z:python3-perf-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
121Red HatBaseOS-8.0.0.Z:python3-perf-debuginfo-0:4.18.0-80.7.2.el8_0.s390x View
122Red HatBaseOS-8.0.0.Z:python3-perf-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
123Red HatCRB-8.0.0.Z:bpftool-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
124Red HatCRB-8.0.0.Z:bpftool-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
125Red HatCRB-8.0.0.Z:bpftool-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
126Red HatCRB-8.0.0.Z:kernel-debug-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
127Red HatCRB-8.0.0.Z:kernel-debug-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
128Red HatCRB-8.0.0.Z:kernel-debug-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
129Red HatCRB-8.0.0.Z:kernel-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
130Red HatCRB-8.0.0.Z:kernel-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
131Red HatCRB-8.0.0.Z:kernel-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
132Red HatCRB-8.0.0.Z:kernel-debuginfo-common-aarch64-0:4.18.0-80.7.2.el8_0.aarch64 View
133Red HatCRB-8.0.0.Z:kernel-debuginfo-common-ppc64le-0:4.18.0-80.7.2.el8_0.ppc64le View
134Red HatCRB-8.0.0.Z:kernel-debuginfo-common-x86_64-0:4.18.0-80.7.2.el8_0.x86_64 View
135Red HatCRB-8.0.0.Z:kernel-tools-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
136Red HatCRB-8.0.0.Z:kernel-tools-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
137Red HatCRB-8.0.0.Z:kernel-tools-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
138Red HatCRB-8.0.0.Z:kernel-tools-libs-devel-0:4.18.0-80.7.2.el8_0.aarch64 View
139Red HatCRB-8.0.0.Z:kernel-tools-libs-devel-0:4.18.0-80.7.2.el8_0.ppc64le View
140Red HatCRB-8.0.0.Z:kernel-tools-libs-devel-0:4.18.0-80.7.2.el8_0.x86_64 View
141Red HatCRB-8.0.0.Z:perf-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
142Red HatCRB-8.0.0.Z:perf-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
143Red HatCRB-8.0.0.Z:perf-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
144Red HatCRB-8.0.0.Z:python3-perf-debuginfo-0:4.18.0-80.7.2.el8_0.aarch64 View
145Red HatCRB-8.0.0.Z:python3-perf-debuginfo-0:4.18.0-80.7.2.el8_0.ppc64le View
146Red HatCRB-8.0.0.Z:python3-perf-debuginfo-0:4.18.0-80.7.2.el8_0.x86_64 View
147Red HatNFV-8.0.0.Z:kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0.src View
148Red HatNFV-8.0.0.Z:kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
149Red HatNFV-8.0.0.Z:kernel-rt-core-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
150Red HatNFV-8.0.0.Z:kernel-rt-debug-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
151Red HatNFV-8.0.0.Z:kernel-rt-debug-core-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
152Red HatNFV-8.0.0.Z:kernel-rt-debug-debuginfo-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
153Red HatNFV-8.0.0.Z:kernel-rt-debug-devel-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
154Red HatNFV-8.0.0.Z:kernel-rt-debug-kvm-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
155Red HatNFV-8.0.0.Z:kernel-rt-debug-kvm-debuginfo-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
156Red HatNFV-8.0.0.Z:kernel-rt-debug-modules-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
157Red HatNFV-8.0.0.Z:kernel-rt-debug-modules-extra-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
158Red HatNFV-8.0.0.Z:kernel-rt-debuginfo-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
159Red HatNFV-8.0.0.Z:kernel-rt-debuginfo-common-x86_64-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
160Red HatNFV-8.0.0.Z:kernel-rt-devel-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
161Red HatNFV-8.0.0.Z:kernel-rt-kvm-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
162Red HatNFV-8.0.0.Z:kernel-rt-kvm-debuginfo-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
163Red HatNFV-8.0.0.Z:kernel-rt-modules-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
164Red HatNFV-8.0.0.Z:kernel-rt-modules-extra-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
165Red HatRT-8.0.0.Z:kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0.src View
166Red HatRT-8.0.0.Z:kernel-rt-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
167Red HatRT-8.0.0.Z:kernel-rt-core-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
168Red HatRT-8.0.0.Z:kernel-rt-debug-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
169Red HatRT-8.0.0.Z:kernel-rt-debug-core-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
170Red HatRT-8.0.0.Z:kernel-rt-debug-debuginfo-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
171Red HatRT-8.0.0.Z:kernel-rt-debug-devel-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
172Red HatRT-8.0.0.Z:kernel-rt-debug-kvm-debuginfo-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
173Red HatRT-8.0.0.Z:kernel-rt-debug-modules-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
174Red HatRT-8.0.0.Z:kernel-rt-debug-modules-extra-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
175Red HatRT-8.0.0.Z:kernel-rt-debuginfo-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
176Red HatRT-8.0.0.Z:kernel-rt-debuginfo-common-x86_64-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
177Red HatRT-8.0.0.Z:kernel-rt-devel-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
178Red HatRT-8.0.0.Z:kernel-rt-kvm-debuginfo-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
179Red HatRT-8.0.0.Z:kernel-rt-modules-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
180Red HatRT-8.0.0.Z:kernel-rt-modules-extra-0:4.18.0-80.7.2.rt9.154.el8_0.x86_64 View
181linuxKernel View
Total affected vendors: 2|Products: 181

RED HAT CSAF/VEX: Product Impact Check

Does this CVE affect my Red Hat product?

The results come directly from the Red Hat CSAF VEX product status; they are not estimates.

Not affected

Red Hat VEX kaydına göre bu ürün etkilenmiyor.

Red Hat fixes

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

For mitigation, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/articles/4292201

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.8cvss_v3HIGHCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:HRed Hat

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

6 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
redhat

For mitigation, please refer to the Red Hat Knowledgebase article: https://access.redhat.com/articles/4292201

reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
reference

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

Open source
canonical

Apply updates per vendor instructions.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

This CVE is marked as actively exploited in the CISA KEV catalogue, but no verified, downloadable public PoC or Metasploit module has been found yet. Evidence of active exploitation does not mean that public exploit code exists.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2019-13272 is associated with the following CWEs:

CWE-271: Common Weakness Enumeration Entry CWE-271

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2019-13272 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

Canonical URLvendor-advisoryRHBZ#1730895vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2019-13272vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2019-13272vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.patch

CVSS Vector Radar Chart

7.8 / 10
Attack VectorLocalComplexityHighPrivilegesLowUser Interact.NoneConfidentialityHighIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)High
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

6 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

RH
Red Hat logo
Red Hat
L
linux logo
linux

Weakness Type (CWE & CAPEC)

CWE-271

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2019-13272"
CVE-2019-13272 · kernel: broken permission and object lifetime handling for PTRACE_TRACEME · DayBreach