What’s Vulnerable › Vulnerabilities

CVE-2019-3459

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-04-11 · updated 2026-06-17
• Weakness: CWE-125

Description

A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.

Affected products

• Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 18.10
• Debian Linux: 8.0
• Linux kernel: through 5.1
• RedHat Codeready Linux Builder: 8.0
• Red Hat Enterprise Linux: 5.0, 6.0, 7.0, 8.0
• RedHat Enterprise Linux Desktop: 7.0
• RedHat Enterprise Linux Eus: 8.1, 8.2, 8.4
• RedHat Enterprise Linux For Real Time: 7, 8
• RedHat Enterprise Linux For Real Time For Nfv: 7, 8
• RedHat Enterprise Linux For Real Time For Nfv Tus: 8.2, 8.4
• RedHat Enterprise Linux For Real Time Tus: 8.2, 8.4
• RedHat Enterprise Linux Server: 7.0
• RedHat Enterprise Linux Server Aus: 8.2, 8.4
• RedHat Enterprise Linux Server Tus: 8.2, 8.4
• RedHat Enterprise Linux Workstation: 7.0
• RedHat Enterprise Mrg: 2.0

References

• http://www.openwall.com/lists/oss-security/2019/06/27/2
• http://www.openwall.com/lists/oss-security/2019/06/27/7
• http://www.openwall.com/lists/oss-security/2019/06/28/1
• http://www.openwall.com/lists/oss-security/2019/06/28/2
• http://www.openwall.com/lists/oss-security/2019/08/12/1
• https://access.redhat.com/errata/RHSA-2019:2029
• https://access.redhat.com/errata/RHSA-2019:2043
• https://access.redhat.com/errata/RHSA-2019:3309
• https://access.redhat.com/errata/RHSA-2019:3517
• https://access.redhat.com/errata/RHSA-2020:0740
• https://bugzilla.novell.com/show_bug.cgi?id=1120758
• https://bugzilla.redhat.com/show_bug.cgi?id=1663176

Get alerted when CVE-2019-3459 or the next vulnerability affects your stack