[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fscw_2WY1SnZLvoFGmjigbo_P3AStsMqq9ioq5E1NXp0":3,"g5a-risk:CVE-2019-18282":258},{"success":4,"data":5,"meta":256},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":105,"references":106,"referencesCount":35,"weaknesses":130,"weaknessesCount":139,"isActivelyExploited":140,"cisaInfo":26,"otxData":26,"relatedBlogPosts":141,"seoMetadata":142,"configurations":167,"relatedVendorCves":254,"notableEvents":255},"CVE-2019-18282","What is CVE-2019-18282?","The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net\u002Fcore\u002Fflow_dissector.c and related code.","The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because t...","2020-01-16T16:15:16.95","2022-04-18T15:48:24.223",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,10,2.9,0.02605,[38,38,38,38,38,38,38],"Medium",[42,47,52,57,60,63,66,69,72,75,78,81,84,87,90,93,96,99,102],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"linux","linux_kernel","*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"netapp","a700s_firmware","-","cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*",{"vendor":53,"product":58,"version":55,"criteria":59,"vulnerable":4},"a700s","cpe:2.3:h:netapp:a700s:-:*:*:*:*:*:*:*",{"vendor":53,"product":61,"version":55,"criteria":62,"vulnerable":4},"8300_firmware","cpe:2.3:o:netapp:8300_firmware:-:*:*:*:*:*:*:*",{"vendor":53,"product":64,"version":55,"criteria":65,"vulnerable":4},"8300","cpe:2.3:h:netapp:8300:-:*:*:*:*:*:*:*",{"vendor":53,"product":67,"version":55,"criteria":68,"vulnerable":4},"8700_firmware","cpe:2.3:o:netapp:8700_firmware:-:*:*:*:*:*:*:*",{"vendor":53,"product":70,"version":55,"criteria":71,"vulnerable":4},"8700","cpe:2.3:h:netapp:8700:-:*:*:*:*:*:*:*",{"vendor":53,"product":73,"version":55,"criteria":74,"vulnerable":4},"a400_firmware","cpe:2.3:o:netapp:a400_firmware:-:*:*:*:*:*:*:*",{"vendor":53,"product":76,"version":55,"criteria":77,"vulnerable":4},"a400","cpe:2.3:h:netapp:a400:-:*:*:*:*:*:*:*",{"vendor":53,"product":79,"version":55,"criteria":80,"vulnerable":4},"h610s_firmware","cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*",{"vendor":53,"product":82,"version":55,"criteria":83,"vulnerable":4},"h610s","cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*",{"vendor":53,"product":85,"version":55,"criteria":86,"vulnerable":4},"active_iq_unified_manager","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",{"vendor":53,"product":88,"version":55,"criteria":89,"vulnerable":4},"cloud_backup","cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",{"vendor":53,"product":91,"version":55,"criteria":92,"vulnerable":4},"data_availability_services","cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*",{"vendor":53,"product":94,"version":45,"criteria":95,"vulnerable":4},"e-series_santricity_os_controller","cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",{"vendor":53,"product":97,"version":55,"criteria":98,"vulnerable":4},"hci_management_node","cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",{"vendor":53,"product":100,"version":55,"criteria":101,"vulnerable":4},"solidfire","cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",{"vendor":53,"product":103,"version":55,"criteria":104,"vulnerable":4},"steelstore_cloud_integrated_storage","cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",19,[107,113,117,122,126],{"url":108,"source":109,"tags":110},"https:\u002F\u002Fcdn.kernel.org\u002Fpub\u002Flinux\u002Fkernel\u002Fv5.x\u002FChangeLog-5.3.10","Kernel",[111,112],"Mailing List","Vendor Advisory",{"url":114,"source":109,"tags":115},"https:\u002F\u002Fgit.kernel.org\u002Fpub\u002Fscm\u002Flinux\u002Fkernel\u002Fgit\u002Fstable\u002Flinux.git\u002Fcommit\u002F?id=55667441c84fa5e0911a0aac44fb059c15ba6da2",[111,116,112],"Patch",{"url":118,"source":119,"tags":120},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F03\u002Fmsg00001.html","Debian",[111,121],"Third Party Advisory",{"url":123,"source":124,"tags":125},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20200204-0002\u002F","Netapp",[121],{"url":127,"source":128,"tags":129},"https:\u002F\u002Fwww.computer.org\u002Fcsdl\u002Fproceedings-article\u002Fsp\u002F2020\u002F349700b594\u002F1j2LgrHDR2o","Computer",[121],[131],{"id":132,"name":133,"description":134,"extendedDescription":135,"status":136,"abstraction":137,"structure":138},"CWE-330","Use of Insufficiently Random Values","The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.","When product generates predictable values in a context requiring unpredictability, it may be possible for an attacker to guess the next value that will be generated, and use this guess to impersonate another user or access sensitive information.","Stable","Class","Simple",1,false,[],{"title":143,"metaDescription":144,"keywords":145,"canonicalUrl":146,"structuredData":147},"What is CVE-2019-18282? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-18282, a medium severity cyber security vulnerability from 2020. The flow_dissector feature in the Linux kernel 4.3 throug...","CVE-2019-18282, CVE-2019-18282 vulnerability, CVE-2019-18282 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, linux security, debian security, netapp security, linux_kernel vulnerability, debian_linux vulnerability, a700s_firmware vulnerability, a700s vulnerability, 8300_firmware vulnerability","\u002Fwhat-is\u002Fcve-2019-18282",{"@context":148,"@type":149,"headline":143,"description":144,"datePublished":10,"dateModified":11,"author":150,"publisher":154,"about":158,"mainEntityOfPage":162,"articleSection":165,"keywords":166},"https:\u002F\u002Fschema.org","TechArticle",{"@type":151,"name":152,"url":153},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":151,"name":152,"url":153,"logo":155},{"@type":156,"url":157},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":159,"name":6,"description":160,"additionalType":161},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":163,"@id":164},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-18282","Cybersecurity","CVE-2019-18282, CVE-2019-18282 vulnerability, CVE-2019-18282 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[168,177,183,194,204,214,224,234],{"Operator":26,"Negate":26,"Nodes":169},[170],{"Operator":171,"Negate":26,"CPEMatch":172},"OR",[173],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":174,"VersionStartExcluding":26,"VersionStartIncluding":175,"VersionEndExcluding":26,"VersionEndIncluding":176},"EC57AAB2-0879-4D7C-8878-68355886476C","4.3","5.3.10",{"Operator":26,"Negate":26,"Nodes":178},[179],{"Operator":171,"Negate":26,"CPEMatch":180},[181],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":182,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":184,"Negate":26,"Nodes":185},"AND",[186,190],{"Operator":171,"Negate":26,"CPEMatch":187},[188],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":189,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FDD92BFA-9117-4E6E-A13F-ED064B4B7284",{"Operator":171,"Negate":26,"CPEMatch":191},[192],{"Vulnerable":26,"Criteria":59,"MatchCriteriaID":193,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4B7DA42F-5D64-4967-A2D4-6210FE507841",{"Operator":184,"Negate":26,"Nodes":195},[196,200],{"Operator":171,"Negate":26,"CPEMatch":197},[198],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":199,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4E73901F-666D-4D8B-BDFD-93DD2F70C74B",{"Operator":171,"Negate":26,"CPEMatch":201},[202],{"Vulnerable":26,"Criteria":65,"MatchCriteriaID":203,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D0FD5AED-42CF-4918-B32C-D675738EF15C",{"Operator":184,"Negate":26,"Nodes":205},[206,210],{"Operator":171,"Negate":26,"CPEMatch":207},[208],{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"34B25BEF-8708-4E2C-8BA6-EBCD5267EB04",{"Operator":171,"Negate":26,"CPEMatch":211},[212],{"Vulnerable":26,"Criteria":71,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CE0F11D2-B5D9-46B4-BFC5-C86BC87D516A",{"Operator":184,"Negate":26,"Nodes":215},[216,220],{"Operator":171,"Negate":26,"CPEMatch":217},[218],{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"04E3BD77-8915-4FFC-8483-5DB5D610F829",{"Operator":171,"Negate":26,"CPEMatch":221},[222],{"Vulnerable":26,"Criteria":77,"MatchCriteriaID":223,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"97E94ECB-BB51-4364-BEDD-8648C193196F",{"Operator":184,"Negate":26,"Nodes":225},[226,230],{"Operator":171,"Negate":26,"CPEMatch":227},[228],{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":229,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"FD7CFE0E-9D1E-4495-B302-89C3096FC0DF",{"Operator":171,"Negate":26,"CPEMatch":231},[232],{"Vulnerable":26,"Criteria":83,"MatchCriteriaID":233,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F63A3FA7-AAED-4A9D-9FDE-6195302DA0F6",{"Operator":26,"Negate":26,"Nodes":235},[236],{"Operator":171,"Negate":26,"CPEMatch":237},[238,240,242,244,248,250,252],{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":239,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":241,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5C2089EE-5D7F-47EC-8EA5-0F69790564C4",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":243,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0EF46487-B64A-454E-AECC-D74B83170ACD",{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":245,"VersionStartExcluding":26,"VersionStartIncluding":246,"VersionEndExcluding":26,"VersionEndIncluding":247},"FF971916-C526-43A9-BD80-985BCC476569","11.0.0","11.70.1",{"Vulnerable":4,"Criteria":98,"MatchCriteriaID":249,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A3C19813-E823-456A-B1CE-EC0684CE1953",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":251,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737",{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":253,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E94F7F59-1785-493F-91A7-5F5EA5E87E4D",[],[],{"lastModified":11,"cacheTime":257,"version":32},1792248438935,{"score":259,"band":260,"action":261,"scoredAt":262},23,"Low","Monitor","2026-10-16T06:47:41.130446+00:00"]