Unrated severityNVD Advisory· Published Mar 25, 2019· Updated Aug 4, 2024

CVE-2019-3874

Description

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

111

osv-coords110 versions
pkg:rpm/opensuse/kernel-debug&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-vanilla&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5 pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kernel-docs&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/kernel-livepatch-SLE15-SP1_Update_27&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP1 pkg:rpm/suse/kernel-livepatch-SLE15_Update_26&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/kernel-rt_debug&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-source-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-syms-azure&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/kernel-syms-rt&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2012%20SP5 pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-vanilla&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kgraft-patch-SLE12-SP4_Update_23&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP4 pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_23&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5
< 4.12.14-197.102.2+ 109 more
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-16.73.2
- (no CPE)range: < 4.12.14-16.73.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.4.121-92.196.2
- (no CPE)range: < 4.4.180-94.182.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 1-3.3.1
- (no CPE)range: < 1-1.3.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-150.78.2
- (no CPE)range: < 4.12.14-197.102.1
- (no CPE)range: < 4.12.14-122.88.2
- (no CPE)range: < 4.12.14-10.57.2
- (no CPE)range: < 4.12.14-10.57.2
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.4.121-92.196.2
- (no CPE)range: < 4.4.180-94.182.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-10.57.1
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-16.73.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.4.121-92.196.2
- (no CPE)range: < 4.4.180-94.182.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-122.88.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-95.83.2
- (no CPE)range: < 4.12.14-10.57.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 4.12.14-197.102.2
- (no CPE)range: < 4.12.14-150.78.1
- (no CPE)range: < 1-6.3.1
- (no CPE)range: < 1-8.5.1
Linux/Kernelcpe-rescue
Range: 3.10.x and 4.18.x

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHSA-2019:3309mitrevendor-advisoryx_refsource_REDHAT
access.redhat.com/errata/RHSA-2019:3517mitrevendor-advisoryx_refsource_REDHAT
usn.ubuntu.com/3979-1/mitrevendor-advisoryx_refsource_UBUNTU
usn.ubuntu.com/3980-1/mitrevendor-advisoryx_refsource_UBUNTU
usn.ubuntu.com/3980-2/mitrevendor-advisoryx_refsource_UBUNTU
usn.ubuntu.com/3981-1/mitrevendor-advisoryx_refsource_UBUNTU
usn.ubuntu.com/3981-2/mitrevendor-advisoryx_refsource_UBUNTU
usn.ubuntu.com/3982-1/mitrevendor-advisoryx_refsource_UBUNTU
usn.ubuntu.com/3982-2/mitrevendor-advisoryx_refsource_UBUNTU
bugzilla.redhat.com/show_bug.cgimitrex_refsource_CONFIRM
lists.debian.org/debian-lts-announce/2020/09/msg00025.htmlmitremailing-listx_refsource_MLIST
security.netapp.com/advisory/ntap-20190411-0003/mitrex_refsource_CONFIRM
www.oracle.com/security-alerts/cpuApr2021.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000