CVE-2019-10638

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。 Linux kernel 5.1.7之前版本中存在加密问题漏洞。该漏洞源于网络系统或产品未正确使用相关密码算法，导致内容未正确加密、弱加密、明文存储敏感信息等。

CVE-2019-10638 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。 Linux kernel 5.1.7之前版本中存在加密问题漏洞。该漏洞源于网络系统或产品未正确使用相关密码算法，导致内容未正确加密、弱加密、明文存储敏感信息等。 CVE-2019-10638 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2019-10638

I. Basic Information for CVE-2019-10638

Affected Products

II. Public POCs for CVE-2019-10638

III. Intelligence Information for CVE-2019-10638

Patches & Fixes for CVE-2019-10638 (5)

• https://github.com/torvalds/linux/commit/df453700e8d81b1bdafdf684365ee2b9431fb702 x_refsource_MISC
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=355b98553789b646ed97ad801a619ff898471b92 x_refsource_MISC
• https://github.com/torvalds/linux/commit/355b98553789b646ed97ad801a619ff898471b92 x_refsource_MISC
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=df453700e8d81b1bdafdf684365ee2b9431fb702 x_refsource_MISC
• https://github.com/torvalds/linux/commit/55f0fc7a02de8f12757f4937143d8d5091b2e40b x_refsource_MISC

Vendor Advisories for CVE-2019-10638 (11)

• https://security.netapp.com/advisory/ntap-20190806-0001/ x_refsource_CONFIRM
• https://www.oracle.com/security-alerts/cpuApr2021.html x_refsource_MISC
• http://www.securityfocus.com/bid/109092 vdb-entry x_refsource_BID
• https://www.debian.org/security/2019/dsa-4495 vendor-advisory x_refsource_DEBIAN
• https://usn.ubuntu.com/4116-1/ vendor-advisory x_refsource_UBUNTU
• 🔗 USN-4114-1: Linux kernel vulnerabilities | Ubuntu security notices | Ubuntu Read full article vendor-advisory x_refsource_UBUNTU
• https://usn.ubuntu.com/4115-1/ vendor-advisory x_refsource_UBUNTU
• https://usn.ubuntu.com/4117-1/ vendor-advisory x_refsource_UBUNTU
• https://usn.ubuntu.com/4118-1/ vendor-advisory x_refsource_UBUNTU
• https://access.redhat.com/errata/RHSA-2019:3517 vendor-advisory x_refsource_REDHAT
• 🔗 RHSA-2019:3309 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT

Exploits & Public PoCs for CVE-2019-10638 (1)

• http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html x_refsource_MISC

Mailing List Discussions for CVE-2019-10638 (7)

• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00025.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00014.html vendor-advisory x_refsource_SUSE
• 🔗 Bugtraq: [SECURITY] [DSA 4495-1] linux security update Read full article mailing-list x_refsource_BUGTRAQ
• https://seclists.org/bugtraq/2019/Aug/18 mailing-list x_refsource_BUGTRAQ
• https://seclists.org/bugtraq/2019/Nov/11 mailing-list x_refsource_BUGTRAQ
• https://lists.debian.org/debian-lts-announce/2019/08/msg00016.html mailing-list x_refsource_MLIST
• https://lists.debian.org/debian-lts-announce/2019/08/msg00017.html mailing-list x_refsource_MLIST

Other References for CVE-2019-10638 (3)

• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.8 x_refsource_MISC
• https://arxiv.org/pdf/1906.10478.pdf x_refsource_MISC
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.7 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2019-10638

Same Patch Batch · n/a · 2019-07-05 · 38 CVEs total

Showing top 20 of 38 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2019-10638