In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 22, 2020 | Oct 4, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libs | Dec 4, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headers | Dec 18, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel | Dec 11, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-sourceUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-headersUpgrade kernel | Nov 28, 2019 | Oct 4, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 6, 2020 | Oct 4, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jan 22, 2020 | Oct 4, 2019 |
| Suse | — | Upgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kernel-docsUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kernel-default-extraUpgrade kgraft-patch-3_12_74-60_64_121-default | Oct 29, 2019 | Oct 4, 2019 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-4.15.0-72-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-4.4.0-1059-awsUpgrade linux-image-4.15.0-1049-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-170-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-170-genericUpgrade linux-image-5.3.0-24-genericUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-4.15.0-72-generic-lpaeUpgrade linux-image-4.15.0-1052-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-4.4.0-170-powerpc64-embUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-4.15.0-1056-awsUpgrade linux-image-4.4.0-170-lowlatencyUpgrade linux-image-4.15.0-72-genericUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-aws-edgeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1065-oemUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-virtualUpgrade linux-image-4.4.0-170-generic-lpaeUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-oracle-edgeUpgrade linux-image-4.4.0-170-powerpc64-smpUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1050-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1063-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1130-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-170-powerpc-smpUpgrade linux-image-4.15.0-1069-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1126-raspi2Upgrade linux-image-genericUpgrade linux-image-snapdragonUpgrade linux-image-gke-5.0Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1051-kvmUpgrade linux-image-4.15.0-1030-oracle | Dec 3, 2019 | Oct 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub