NetSight
IP …
critical9.8

CVE-2019-14896

A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver.

Impact

A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.32 before 3.16.83
from 3.17 before 4.4.212
from 4.5 before 4.9.212
from 4.10 before 4.14.169
from 4.15 before 4.19.100
from 4.20 before 5.4.16
FedoraprojectFedora
Versions 30, 31
RedhatEnterprise Linux
Version 6.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.10
DebianDebian Linux
Version 8.0

Weakness classification

CWE-122CWE-787

References