CVE-2019-10638
Description
In the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g., UDP and ICMP). When such traffic is sent to multiple destination IP addresses, it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.
Risk Information
Base Score
6.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.76
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Linux kernel (USN-4115-1) linux-image-gcp_4.15.0.1041.55_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-gke_4.15.0.1041.44_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-gke_4.15.0.1041.55_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-kvm_4.15.0.1043.43_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-oem_4.15.0.60.81_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-azure_4.15.0.1056.59_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-oracle_4.15.0.1022.16_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-oracle_4.15.0.1022.25_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-generic_4.15.0.60.62_i386.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-generic_4.15.0.60.62_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-virtual_4.15.0.60.62_i386.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-virtual_4.15.0.60.62_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-gke-4.15_4.15.0.1041.44_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-lowlatency_4.15.0.60.62_i386.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-lowlatency_4.15.0.60.62_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-1041-gcp_4.15.0-1041.43_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-1041-gke_4.15.0-1041.43_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-1043-kvm_4.15.0-1043.43_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-1056-azure_4.15.0-1056.61_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67_i386.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67~16.04.1_i386.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-60-generic_4.15.0-60.67~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-generic-hwe-16.04_4.15.0.60.81_i386.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-generic-hwe-16.04_4.15.0.60.81_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-virtual-hwe-16.04_4.15.0.60.81_i386.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-virtual-hwe-16.04_4.15.0.60.81_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-1022-oracle_4.15.0-1022.25_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-1022-oracle_4.15.0-1022.25~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67_i386.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67~16.04.1_i386.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-4.15.0-60-lowlatency_4.15.0-60.67~16.04.1_amd64.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-lowlatency-hwe-16.04_4.15.0.60.81_i386.deb | Linux |
| Linux kernel (USN-4115-1) linux-image-lowlatency-hwe-16.04_4.15.0.60.81_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws_4.15.0.1047.46_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-aws-hwe_4.15.0.1047.47_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49_amd64.deb | Linux |
| Linux kernel for Amazon Web Services (AWS) systems (USN-4118-1) linux-image-4.15.0-1047-aws_4.15.0-1047.49~16.04.1_amd64.deb | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update bpftool-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-abi-whitelists-3.10.0-1127.el7.noarch.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-doc-3.10.0-1127.el7.noarch.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-headers-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update perf-3.10.0-1127.el7.x86_64.rpm | Linux |
| (RHSA-2020:1016) kernel security, bug fix, and enhancement update python-perf-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update bpftool-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-debug-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-headers-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update kernel-tools-libs-devel-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update perf-3.10.0-1127.el7.x86_64.rpm | Linux |
| (CESA-2020:1016) kernel security, bug fix, and enhancement update python-perf-3.10.0-1127.el7.x86_64.rpm | Linux |
| Inadequate Encryption Strength Vulnerability (CVE-2019-10638) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234