[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDMIOo8Kq41YlrWN2F1gHjA0-7KjfbGSpptqRpY2KDPs":3,"g5a-risk:CVE-2019-3901":206},{"success":4,"data":5,"meta":204},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":50,"epssPercentile":27,"epssTimeSeries":51,"severity":52,"affectedProducts":53,"affectedProductsCount":93,"references":94,"referencesCount":119,"weaknesses":120,"weaknessesCount":28,"isActivelyExploited":129,"cisaInfo":27,"otxData":27,"relatedBlogPosts":130,"seoMetadata":131,"configurations":156,"relatedVendorCves":202,"notableEvents":203},"CVE-2019-3901","What is CVE-2019-3901?","A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_mutex) are held during the ptrace_may_access() call, it is possible for the specified target task to perform an execve() syscall with setuid execution before perf_event_alloc() actually attaches to it, allowing an attacker to bypass the ptrace_may_access() check and the perf_event_exit_task(current) call that is performed in install_exec_creds() during privileged execve() calls. This issue affects kernel versions before 4.8.","A race condition in perf_event_open() allows local attackers to leak sensitive data from setuid programs. As no relevant locks (in particular the cred_guard_...","2019-04-22T16:29:01.85","2023-02-12T23:38:57.67",4.7,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":41,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":24,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","HIGH","LOW","NONE","UNCHANGED","MEDIUM",null,1,3.6,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":39,"ImpactScore":40},"secalert@redhat.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":37,"ConfidentialityImpact":22,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":38,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N","CHANGED",5.6,1.1,4,[42],{"Source":17,"Type":18,"CVSSData":43,"BaseSeverity":23,"ExploitabilityScore":48,"ImpactScore":49,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":44,"VectorString":45,"AccessVector":21,"AccessComplexity":26,"Authentication":24,"ConfidentialityImpact":46,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":47,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",1.9,3.4,2.9,0.00339,[50,50,50,50,50,50,50],"Medium",[54,59,64,68,72,75,78,81,84,87,90],{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"linux","linux_kernel","*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":57,"criteria":67,"vulnerable":4},"netapp","active_iq_unified_manager_for_vmware_vsphere","cpe:2.3:a:netapp:active_iq_unified_manager_for_vmware_vsphere:*:*:*:*:*:*:*:*",{"vendor":65,"product":69,"version":70,"criteria":71,"vulnerable":4},"hci_management_node","-","cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",{"vendor":65,"product":73,"version":70,"criteria":74,"vulnerable":4},"snapprotect","cpe:2.3:a:netapp:snapprotect:-:*:*:*:*:*:*:*",{"vendor":65,"product":76,"version":70,"criteria":77,"vulnerable":4},"solidfire","cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",{"vendor":65,"product":79,"version":57,"criteria":80,"vulnerable":4},"storage_replication_adapter_for_clustered_data_ontap_for_vmware_vsphere","cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap_for_vmware_vsphere:*:*:*:*:*:*:*:*",{"vendor":65,"product":82,"version":57,"criteria":83,"vulnerable":4},"vasa_provider_for_clustered_data_ontap","cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",{"vendor":65,"product":85,"version":57,"criteria":86,"vulnerable":4},"virtual_storage_console_for_vmware_vsphere","cpe:2.3:a:netapp:virtual_storage_console_for_vmware_vsphere:*:*:*:*:*:*:*:*",{"vendor":65,"product":88,"version":70,"criteria":89,"vulnerable":4},"cn1610_firmware","cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*",{"vendor":65,"product":91,"version":70,"criteria":92,"vulnerable":4},"cn1610","cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*",11,[95,101,107,112,115],{"url":96,"source":97,"tags":98},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F89937","Securityfocus",[99,100],"Third Party Advisory","VDB Entry",{"url":102,"source":103,"tags":104},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2019-3901","Red Hat",[105,106,99],"Issue Tracking","Patch",{"url":108,"source":109,"tags":110},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F05\u002Fmsg00041.html","Debian",[111,99],"Mailing List",{"url":113,"source":109,"tags":114},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F05\u002Fmsg00042.html",[111,99],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20190517-0005\u002F","Netapp",[99],5,[121],{"id":122,"name":123,"description":124,"extendedDescription":125,"status":126,"abstraction":127,"structure":128},"CWE-667","Improper Locking","The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.","Locking is a type of synchronization behavior that ensures that multiple independently-operating processes or threads do not interfere with each other when accessing the same resource. All processes\u002Fthreads are expected to follow the same steps for locking. If these steps are not followed precisely - or if no locking is done at all - then another process\u002Fthread could modify the shared resource in a way that is not visible or predictable to the original process.  This can lead to data or memory corruption, denial of service, etc.","Draft","Class","Simple",false,[],{"title":132,"metaDescription":133,"keywords":134,"canonicalUrl":135,"structuredData":136},"What is CVE-2019-3901? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-3901, a medium severity cyber security vulnerability from 2019. A race condition in perf_event_open() allows local attacke...","CVE-2019-3901, CVE-2019-3901 vulnerability, CVE-2019-3901 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, linux security, debian security, netapp security, linux_kernel vulnerability, debian_linux vulnerability, active_iq_unified_manager_for_vmware_vsphere vulnerability, hci_management_node vulnerability, snapprotect vulnerability","\u002Fwhat-is\u002Fcve-2019-3901",{"@context":137,"@type":138,"headline":132,"description":133,"datePublished":10,"dateModified":11,"author":139,"publisher":143,"about":147,"mainEntityOfPage":151,"articleSection":154,"keywords":155},"https:\u002F\u002Fschema.org","TechArticle",{"@type":140,"name":141,"url":142},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":140,"name":141,"url":142,"logo":144},{"@type":145,"url":146},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":148,"name":6,"description":149,"additionalType":150},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":152,"@id":153},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-3901","Cybersecurity","CVE-2019-3901, CVE-2019-3901 vulnerability, CVE-2019-3901 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[157,165,171,191],{"Operator":27,"Negate":27,"Nodes":158},[159],{"Operator":160,"Negate":27,"CPEMatch":161},"OR",[162],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":164,"VersionEndIncluding":27},"28EB12EC-3BC4-4DCC-9A6A-5F810F17E8FE","4.8",{"Operator":27,"Negate":27,"Nodes":166},[167],{"Operator":160,"Negate":27,"CPEMatch":168},[169],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":170,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":27,"Negate":27,"Nodes":172},[173],{"Operator":160,"Negate":27,"CPEMatch":174},[175,178,180,182,184,187,189],{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":176,"VersionStartExcluding":27,"VersionStartIncluding":177,"VersionEndExcluding":27,"VersionEndIncluding":27},"6E263387-E95B-48CA-A043-11DD6B3DA6AF","9.5",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":179,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A3C19813-E823-456A-B1CE-EC0684CE1953",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":181,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F74F467A-0C81-40D9-BA06-40FB8EF02C04",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":183,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":185,"VersionStartExcluding":27,"VersionStartIncluding":186,"VersionEndExcluding":27,"VersionEndIncluding":27},"AB55E2B2-4297-48DC-9FCD-B0BC9F9142E3","7.2",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":188,"VersionStartExcluding":27,"VersionStartIncluding":186,"VersionEndExcluding":27,"VersionEndIncluding":27},"13270F58-E106-48CE-9933-E68AABBBFC21",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":190,"VersionStartExcluding":27,"VersionStartIncluding":186,"VersionEndExcluding":27,"VersionEndIncluding":27},"5A2FEFEB-FD91-4E9A-8EEB-B460DF1CA19E",{"Operator":192,"Negate":27,"Nodes":193},"AND",[194,198],{"Operator":160,"Negate":27,"CPEMatch":195},[196],{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":197,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EB30733E-68FC-49C4-86C0-7FEE75C366BF",{"Operator":160,"Negate":27,"CPEMatch":199},[200],{"Vulnerable":27,"Criteria":92,"MatchCriteriaID":201,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6361DAC6-600F-4B15-8797-D67F298F46FB",[],[],{"lastModified":11,"cacheTime":205,"version":44},1792249102096,{"score":207,"band":208,"action":209,"scoredAt":210},15,"Info","Track","2026-10-16T06:46:00.243218+00:00"]