NetSight
IP …
critical9.8

CVE-2019-17133

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

Impact

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.32 before 3.16.77
from 3.17 before 4.4.198
from 4.5 before 4.9.198
from 4.10 before 4.14.151
from 4.15 before 4.19.81
from 4.20 before 5.3.8
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.04
OpensuseLeap
Version 15.1

Weakness classification

CWE-120

References