CVE-2019-15098

MEDIUM 4.6CVE-2019-15098 · Published 16/08/2019 · updated 17/06/2026

In short

CVE-2019-15098 is a MEDIUM (CVSS 4.6) vulnerability affecting active iq unified manager (netapp).
Chance of exploitation in the next 30 days (EPSS): 0.75%, higher than 55.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
active iq unified manager netapp	`≥ 9.5`	No fix yet

Description

drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

References

lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html · Mailing List
packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html · Third Party Advisory
openwall.com/lists/oss-security/2019/09/27/1 · Mailing List
openwall.com/lists/oss-security/2019/09/27/2 · Mailing List
openwall.com/lists/oss-security/2019/09/27/3 · Mailing List
lists.debian.org/debian-lts-announce/2020/01/msg00013.html · Mailing List
lists.debian.org/debian-lts-announce/2020/03/msg00001.html · Mailing List
lore.kernel.org/linux-wireless/20190804002905.11292-1-benquike%40gmail.com/T
seclists.org/bugtraq/2019/Nov/11

More vulnerabilities in active iq unified manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free