CVE-2019-10140CWE-476

A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs

Medium · published August 15, 2019

CVSS v3.0
5.5
EPSS
0%
Percentile
23.8
In the wild
Unconfirmed
What it is

A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs. An attacker with local access can create a denial of service situation via NULL pointer dereference in ovl_posix_acl_create function in fs/overlayfs/dir.c. This can allow attackers with ability to create directories on overlayfs to crash the kernel creating a denial of service (DOS).

The record
Technical detail
CVSS v3.0
5.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.8th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2019-08-15T16:50Z
EPSS history
Timeline
  • 15 AUG 16:50Z
    A vulnerability was found in Linux kernel's, versions up to 3.10, implementation of overlayfs
    cvelistv5