NetSight
IP …
critical9.8

CVE-2019-14897

A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver.

Impact

A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.32 before 3.16.83
from 3.17 before 4.4.212
from 4.5 before 4.9.212
from 4.10 before 4.14.169
from 4.15 before 4.19.100
from 4.20 before 5.4.16
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.10

Weakness classification

CWE-121CWE-787

References