CVEvulnerability

CVE-2019-14895

9.8 CRITICAL Published 2019-11-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
8.0 HIGH — CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-122, CWE-787

Description

A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.

Affected configurations

• linux linux kernel (>= 3.7 < 3.16.81) • linux linux kernel (>= 3.17 < 4.4.210) • linux linux kernel (>= 4.5 < 4.9.210) • linux linux kernel (>= 4.10 < 4.14.165) • linux linux kernel (>= 4.15 < 4.19.96) • linux linux kernel (>= 4.20 < 5.4.12) • debian debian linux 8.0 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 19.04 • canonical ubuntu linux 19.10 • fedoraproject fedora 30 • fedoraproject fedora 31 • opensuse leap 15.1

Related

Weakness · CWE (2)

  • CWE-122 Heap-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References