In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 22, 2020 | Oct 4, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-devel | Dec 4, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perf | Dec 18, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | Dec 11, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade bpftool | Nov 28, 2019 | Oct 4, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 6, 2020 | Oct 4, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 22, 2020 | Oct 4, 2019 |
| Suse | — | Upgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kernel-default-extraUpgrade kgraft-patch-3_12_74-60_64_121-defaultUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kernel-obs-buildUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kernel-defaultUpgrade kernel-docsUpgrade kgraft-patch-3_12_74-60_64_118-default | Oct 29, 2019 | Oct 4, 2019 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1126-raspi2Upgrade linux-image-4.15.0-1030-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-1023-awsUpgrade linux-image-genericUpgrade linux-image-4.15.0-1050-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-virtualUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-4.4.0-1063-kvmUpgrade linux-image-gcp-edgeUpgrade linux-image-gke-5.0Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1130-snapdragonUpgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-gkeUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-4.15.0-1051-kvmUpgrade linux-image-4.15.0-1069-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-170-powerpc-smpUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-edgeUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-4.4.0-170-powerpc64-smpUpgrade linux-image-4.4.0-170-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1065-oemUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-170-lowlatencyUpgrade linux-image-4.4.0-1059-awsUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-24-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-170-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-72-lowlatencyUpgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1052-raspi2Upgrade linux-image-4.15.0-1049-gkeUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-4.15.0-72-generic-lpaeUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1056-awsUpgrade linux-image-azureUpgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-72-genericUpgrade linux-image-4.4.0-170-genericUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-4.4.0-170-powerpc64-embUpgrade linux-image-aws-hwe | Dec 3, 2019 | Oct 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub