PT-2019-4201 · Linux+4 · Linux Kernel+4
Dhananjay Arunesh
·
Publicado
2019-11-25
·
Atualizado
2024-06-15
·
CVE-2019-14896
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel version kernel-2.6.32
Description
A heap-based buffer overflow vulnerability was found in the Linux kernel's Marvell WiFi chip driver. This issue is related to the
lbs ibss join existing function and the add ie rates function in the drivers/net/wireless/marvell/libertas/cfg.c file. A remote attacker could cause a denial of service (system crash) or possibly execute arbitrary code when the lbs ibss join existing function is called after a STA connects to an AP. The vulnerability also allows an attacker to access confidential data, compromise its integrity, and cause a denial of service.Recommendations
For Linux kernel version kernel-2.6.32, consider disabling the
lbs ibss join existing function and restricting access to the add ie rates function in the drivers/net/wireless/marvell/libertas/cfg.c file as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.DoS
Memory Corruption
Heap Based Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Red Hat
Suse
Ubuntu