What’s Vulnerable › Vulnerabilities
CVE-2019-3874
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2019-03-25 · updated 2026-06-17
- Weakness: CWE-400
Description
The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
Affected products
- Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 18.10, 19.04
- Debian Linux: 8.0
- Linux kernel: from 3.10.1 through 3.10.108; from 4.18.1 through 4.18.20
- NetApp Active Iq Unified Manager For Vmware Vsphere: from 9.5
- NetApp Cn1610 Firmware: all versions
- NetApp Hci Management Node: all versions
- NetApp Snapprotect: all versions
- NetApp Solidfire: all versions
- Red Hat Enterprise Linux: 7.0
References
- https://access.redhat.com/errata/RHSA-2019:3309
- https://access.redhat.com/errata/RHSA-2019:3517
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3874
- https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html
- https://security.netapp.com/advisory/ntap-20190411-0003/
- https://usn.ubuntu.com/3979-1/
- https://usn.ubuntu.com/3980-1/
- https://usn.ubuntu.com/3980-2/
- https://usn.ubuntu.com/3981-1/
- https://usn.ubuntu.com/3981-2/
- https://usn.ubuntu.com/3982-1/
- https://usn.ubuntu.com/3982-2/
Get alerted when CVE-2019-3874 or the next vulnerability affects your stack