high7.8
CVE-2019-14814
There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local user…
Impact
There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 3.7 before 3.16.74 from 3.17 before 4.4.194 from 4.5 before 4.9.194 from 4.10 before 4.14.146 from 4.15 before 4.19.75 from 4.20 before 5.2.17 |
| Redhat | Enterprise Linux | Versions 5.0, 6.0, 7.0, 8.0 |
| Redhat | Enterprise Linux Eus | Versions 8.1, 8.2, 8.4 |
| Redhat | Enterprise Linux For Real Time | Version 8 |
| Redhat | Enterprise Linux For Real Time For Nfv | Version 8 |
| Redhat | Enterprise Linux For Real Time For Nfv Tus | Versions 8.2, 8.4 |
| Redhat | Enterprise Linux For Real Time Tus | Versions 8.2, 8.4 |
| Redhat | Enterprise Linux Server Aus | Versions 8.2, 8.4 |
| Redhat | Enterprise Linux Server Tus | Versions 8.2, 8.4 |
| Redhat | Messaging Realtime Grid | Version 2.0 |
| Debian | Debian Linux | Version 8.0 |
| Canonical | Ubuntu Linux | Versions 14.04, 16.04, 18.04, 19.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html
- http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
- http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
- http://www.openwall.com/lists/oss-security/2019/08/28/1
- https://access.redhat.com/errata/RHSA-2020:0174
- https://access.redhat.com/errata/RHSA-2020:0328
- https://access.redhat.com/errata/RHSA-2020:0339
- https://access.redhat.com/security/cve/cve-2019-14814
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14814
- https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3a
- https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/
- https://seclists.org/bugtraq/2019/Nov/11
- https://security.netapp.com/advisory/ntap-20191031-0005/
- https://usn.ubuntu.com/4157-1/
- https://usn.ubuntu.com/4157-2/
- https://usn.ubuntu.com/4162-1/
- https://usn.ubuntu.com/4162-2/
- https://usn.ubuntu.com/4163-1/
- https://usn.ubuntu.com/4163-2/
- https://www.openwall.com/lists/oss-security/2019/08/28/1
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html