Name: CVE-2019-10220: Improper Limitation of a Pathname to a Restricted Directory
Creator: Rapid7
Published: 2019-11-27T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-10220, CWE-22, CVSS 8.8, EPSS 0.00744

Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.

CVSS Details

CVSS 3.1 Base Score: 8.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS 3.0 Base Score: 8
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade linux	Jan 20, 2020	Nov 27, 2019
Huawei Euleros 2_0_sp2	—	Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64	Jun 17, 2020	Nov 27, 2019
Huawei Euleros 2_0_sp3	—	Upgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel	Apr 16, 2020	Nov 27, 2019
Huawei Euleros 2_0_sp5	—	Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade python-perf	Dec 27, 2019	Nov 27, 2019
Huawei Euleros 2_0_sp8	—	Upgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-sourceUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools	Jan 3, 2020	Nov 27, 2019
Oracle_linux	—	Upgrade kernel-uek	Oct 9, 2021	Nov 27, 2019
Suse	—	Upgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade kernel-ec2-develUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-default	Oct 31, 2019	Oct 30, 2019
Ubuntu	—	Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-oracle-edgeUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-gke-5.0Upgrade linux-image-gkeUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-genericUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-aws-edgeUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-virtualUpgrade linux-image-azureUpgrade linux-image-5.0.0-1023-aws	Jan 8, 2020	Oct 30, 2019
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Nov 27, 2019

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence