PT-2019-5511 · Linux+5 · Linux Kernel+5

Huangwen · Published 2019-08-28 · Updated 2023-07-13 · CVE-2019-14815

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A Heap Overflow vulnerability was found in the mwifiex set wmm params() function of the Marvell Wifi Driver in the Linux Kernel. This issue is related to buffer overflow errors. Exploitation of the vulnerability may allow an attacker to cause a denial of service or execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

ALT-PU-2019-2762

ALT-PU-2019-2763

ALT-PU-2019-2764

ALT-PU-2019-2768

ALT-PU-2019-2838

ALT-PU-2019-2842

ALT-PU-2019-2890

ALT-PU-2019-2891

ALT-PU-2020-1025

ALT-PU-2020-1070

ALT-PU-2020-1198

ALT-PU-2020-1501

ALT-PU-2020-1714

ALT-PU-2020-2410

ALT-PU-2020-2433

ALT-PU-2021-1870

BDU:2020-03329

CESA-2020_0328

CESA-2020_0339

CESA-2020_1016

CVE-2019-14815

DLA-1930-1

DLA-2114-1

MGASA-2019-0287

MGASA-2019-0288

MGASA-2019-0333

OPENSUSE-SU-2019:2173-1

OPENSUSE-SU-2019:2181-1

OPENSUSE-SU-2019_2173-1

OPENSUSE-SU-2019_2181-1

RHSA-2020:0174

RHSA-2020:0328

RHSA-2020:0339

RHSA-2020:1016

RHSA-2020:1070

RHSA-2020_0328

RHSA-2020_0339

RHSA-2020_1016

RHSA-2020_1070

SUSE-SU-2019:2412-1

SUSE-SU-2019:2414-1

SUSE-SU-2019:2424-1

SUSE-SU-2019:2648-1

SUSE-SU-2019:2651-1

SUSE-SU-2019:2658-1

SUSE-SU-2019:2738-1

SUSE-SU-2019:2756-1

SUSE-SU-2019:2949-1

SUSE-SU-2019:2950-1

SUSE-SU-2019:2984-1

SUSE-SU-2020:2491-1

USN-4157-1

USN-4157-2

USN-4162-1

USN-4162-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 728

• https://access.redhat.com/errata/RHSA-2020:0328 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2984-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-14815 · Vendor Advisory
• https://lore.kernel.org/linux-wireless/20190828020751.13625-1-huangwenabc%40gmail.com · Vendor Advisory
• https://osv.dev/vulnerability/USN-4157-2 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-5670.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2950-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2658-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-2181 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2020:0339 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-14815 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-14821 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2181-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2020-0339.html · Vendor Advisory