NetSight
IP …
critical9.8

CVE-2019-14895

A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver.

Impact

A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.7 before 3.16.81
from 3.17 before 4.4.210
from 4.5 before 4.9.210
from 4.10 before 4.14.165
from 4.15 before 4.19.96
from 4.20 before 5.4.12
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.04, 19.10
FedoraprojectFedora
Versions 30, 31
OpensuseLeap
Version 15.1

Weakness classification

CWE-122CWE-787

References