A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Sep 14, 2020 | Nov 27, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headers | Jun 17, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel | Apr 16, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-tools-libs | Feb 24, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headers | Feb 26, 2020 | Nov 27, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 27, 2020 | Nov 25, 2019 |
| Redhat_linux | — | Upgrade kernel | Sep 14, 2020 | Nov 27, 2019 |
| Suse | — | Upgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade kernel-obs-buildUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade kgraft-patch-3_12_74-60_64_121-default | Jan 23, 2020 | Nov 27, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-oracleUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-gcp-edgeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-4.4.0-1064-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1057-awsUpgrade linux-image-4.4.0-1100-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1127-raspi2Upgrade linux-image-4.15.0-1066-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-4.4.0-171-genericUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-aws-edgeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-171-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-4.4.0-171-powerpc-smpUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-5.3.0-1009-azureUpgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-oracle-edgeUpgrade linux-image-azure-edgeUpgrade linux-image-4.4.0-171-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-4.4.0-1131-snapdragonUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-4.4.0-1060-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-171-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-4.4.0-171-generic-lpaeUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-4.4.0-171-lowlatencyUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-powerpc64-smp | Jan 8, 2020 | Nov 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub