NetSight
high8.8

CVE-2019-17666

rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.

Impact

rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.16.77
from 3.17 before 4.4.199
from 4.5 before 4.9.199
from 4.10 before 4.14.152
from 4.15 before 4.19.82
from 4.20 before 5.2
DebianDebian Linux
Version 8.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.04, 19.10

Weakness classification

References