Home > Vulnerability Database > CVE-2019-11184

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2019-11184

Date: September 16, 2019

A race condition in specific microprocessors using Intel (R) DDIO cache allocation and RDMA may allow an authenticated user to potentially enable partial information disclosure via adjacent access.

Severity Score

4.8

Related Resources (10)

Url: https://support.f5.com/csp/article/K43220413

Url: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00290.html

Url: https://security.netapp.com/advisory/ntap-20190926-0001/

Url: https://support.f5.com/csp/article/K43220413?utm_source=f5support&utm_medium=RSS

Url: https://nvd.nist.gov/vuln/detail/CVE-2019-11184

Url: https://arxiv.org/abs/1909.04841

Url: https://access.redhat.com/security/cve/CVE-2019-11184

Url: https://support.f5.com/csp/article/K43220413?utm_source=f5support&%3Butm_medium=RSS

Url: https://ieeexplore.ieee.org/document/9152768

Url: https://www.mend.io/vulnerability-database/CVE-2019-11184

Severity Score

4.8

Weakness Type (CWE)

Race Conditions

CWE-362

CVSS v3.1

Base Score:	4.8
Attack Vector (AV):	ADJACENT_NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	2.3
Access Vector (AV):	ADJACENT
Access Complexity (AC):	MEDIUM
Authentication (AU):	SINGLE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us