NetSight
IP …
critical9.8

CVE-2019-16746

An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17.

Impact

An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.25 before 3.16.79
from 3.17 before 4.4.197
from 4.5 before 4.9.197
from 4.10 before 4.14.149
from 4.15 before 4.19.79
from 4.20 before 5.3.6
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.04, 19.10
FedoraprojectFedora
Version 30
OpensuseLeap
Version 15.1

Weakness classification

CWE-120

References