high7.8
CVE-2019-14816
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to c…
Impact
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 3.6 before 3.16.74 from 3.17 before 4.4.194 from 4.5 before 4.9.194 from 4.10 before 4.14.146 from 4.15 before 4.19.75 from 4.20 before 5.2.17 |
| Redhat | Virtualization | Versions 4.0, 4.2 |
| Redhat | Enterprise Linux | Versions 5.0, 6.0, 6.4, 7.0, 7.6, 8.0 |
| Redhat | Enterprise Linux Compute Node Eus | Version 7.6 |
| Redhat | Enterprise Linux Eus | Versions 7.6, 7.7, 8.1, 8.2, 8.4 |
| Redhat | Enterprise Linux For Power Big Endian Eus | Version 7.6_ppc64 |
| Redhat | Enterprise Linux For Real Time | Versions 7, 8 |
| Redhat | Enterprise Linux For Real Time For Nfv | Versions 7, 8 |
| Redhat | Enterprise Linux For Real Time For Nfv Tus | Versions 8.2, 8.4 |
| Redhat | Enterprise Linux For Real Time Tus | Versions 8.2, 8.4 |
| Redhat | Enterprise Linux Server | Versions 7.6, 8.0 |
| Redhat | Enterprise Linux Server Aus | Versions 7.2, 7.3, 7.6, 8.2, 8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html
- http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
- http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
- http://www.openwall.com/lists/oss-security/2019/08/28/1
- https://access.redhat.com/errata/RHSA-2020:0174
- https://access.redhat.com/errata/RHSA-2020:0204
- https://access.redhat.com/errata/RHSA-2020:0328
- https://access.redhat.com/errata/RHSA-2020:0339
- https://access.redhat.com/errata/RHSA-2020:0374
- https://access.redhat.com/errata/RHSA-2020:0375
- https://access.redhat.com/errata/RHSA-2020:0653
- https://access.redhat.com/errata/RHSA-2020:0661
- https://access.redhat.com/errata/RHSA-2020:0664
- https://access.redhat.com/security/cve/cve-2019-14816
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14816
- https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3
- https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
- https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/
- https://seclists.org/bugtraq/2019/Nov/11
- https://security.netapp.com/advisory/ntap-20191031-0005/
- https://usn.ubuntu.com/4157-1/
- https://usn.ubuntu.com/4157-2/