What’s Vulnerable › Vulnerabilities

CVE-2019-3460

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-04-11 · updated 2026-06-17
• Weakness: CWE-20

Description

A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.

Affected products

• Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 18.10
• Debian Linux: 8.0
• Linux kernel: through 5.1
• RedHat Codeready Linux Builder: 8.0
• Red Hat Enterprise Linux: 8.0
• RedHat Enterprise Linux Desktop: 7.0
• RedHat Enterprise Linux Eus: 8.1, 8.2, 8.4
• RedHat Enterprise Linux For Real Time: 7, 8
• RedHat Enterprise Linux For Real Time For Nfv: 7, 8
• RedHat Enterprise Linux For Real Time For Nfv Tus: 8.2, 8.4
• RedHat Enterprise Linux For Real Time Tus: 8.2, 8.4
• RedHat Enterprise Linux Server: 7.0
• RedHat Enterprise Linux Server Aus: 8.2, 8.4
• RedHat Enterprise Linux Server Tus: 8.2, 8.4
• RedHat Enterprise Linux Workstation: 7.0
• RedHat Virtualization Host: 4.0

References

• http://www.openwall.com/lists/oss-security/2019/06/27/2
• http://www.openwall.com/lists/oss-security/2019/06/27/7
• http://www.openwall.com/lists/oss-security/2019/06/28/1
• http://www.openwall.com/lists/oss-security/2019/06/28/2
• http://www.openwall.com/lists/oss-security/2019/08/12/1
• https://access.redhat.com/errata/RHSA-2019:2029
• https://access.redhat.com/errata/RHSA-2019:2043
• https://access.redhat.com/errata/RHSA-2019:3309
• https://access.redhat.com/errata/RHSA-2019:3517
• https://access.redhat.com/errata/RHSA-2020:0740
• https://bugzilla.redhat.com/show_bug.cgi?id=1663179
• https://git.kernel.org/linus/af3d5d1c87664a4f150fcf3534c6567cb19909b0

Get alerted when CVE-2019-3460 or the next vulnerability affects your stack