A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Sep 14, 2020 | Nov 27, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel | Jun 17, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools | Apr 16, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Feb 24, 2020 | Nov 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernelUpgrade kernel-headersUpgrade python-perf | Feb 26, 2020 | Nov 27, 2019 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 27, 2020 | Nov 25, 2019 |
| Redhat_linux | — | Upgrade kernel | Sep 14, 2020 | Nov 27, 2019 |
| Suse | — | Upgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade kernel-docsUpgrade kgraft-patch-3_12_74-60_64_121-defaultUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kernel-obs-build | Jan 23, 2020 | Nov 27, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-gcp-edgeUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-4.4.0-171-genericUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-4.4.0-1064-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-4.4.0-1127-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-gke-4.15Upgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-4.4.0-171-powerpc-e500mcUpgrade linux-image-5.3.0-1010-gcpUpgrade linux-image-oemUpgrade linux-image-5.3.0-26-genericUpgrade linux-image-oracleUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-edgeUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1100-awsUpgrade linux-image-5.3.0-26-lowlatencyUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-5.3.0-1015-raspi2Upgrade linux-image-4.4.0-171-powerpc64-embUpgrade linux-image-5.3.0-26-snapdragonUpgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-5.3.0-1009-awsUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.3.0-1008-oracleUpgrade linux-image-5.3.0-26-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-171-powerpc-smpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-1009-azureUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-4.4.0-171-generic-lpaeUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-171-lowlatencyUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oracle-edgeUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-171-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.3.0-1011-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1009-kvmUpgrade linux-image-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-4.4.0-1131-snapdragonUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-oem-osp1 | Jan 8, 2020 | Nov 27, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub