A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 5, 2020 | Nov 29, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Jun 17, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Apr 16, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel | Feb 24, 2020 | Nov 29, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-source | Feb 26, 2020 | Nov 29, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 6, 2020 | Nov 25, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Nov 29, 2019 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 5, 2020 | Nov 29, 2019 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-build | Dec 7, 2019 | Nov 29, 2019 |
| Ubuntu | — | Upgrade linux-image-gcp-edgeUpgrade linux-image-4.4.0-1100-awsUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-azureUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-oracle-edgeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gke-5.0Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-171-lowlatencyUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.4.0-171-powerpc-e500mcUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-oracleUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-oemUpgrade linux-image-4.4.0-171-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-171-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1131-snapdragonUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-snapdragonUpgrade linux-image-genericUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1064-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1127-raspi2Upgrade linux-image-4.4.0-171-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-171-generic-lpaeUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-171-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-lowlatency-hwe-16.04 | Jan 8, 2020 | Nov 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub