In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 22, 2020 | Oct 4, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel | Dec 4, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-headers | Dec 18, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Dec 11, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-sourceUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-headers | Nov 28, 2019 | Oct 4, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 6, 2020 | Oct 4, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jan 22, 2020 | Oct 4, 2019 |
| Suse | — | Upgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kernel-default-extraUpgrade kgraft-patch-3_12_74-60_64_121-defaultUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kernel-obs-buildUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kernel-defaultUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kernel-docsUpgrade kgraft-patch-3_12_74-60_64_110-default | Oct 29, 2019 | Oct 4, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-4.4.0-1063-kvmUpgrade linux-image-4.4.0-170-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1030-oracleUpgrade linux-image-4.4.0-1126-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1130-snapdragonUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-oracle-edgeUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1069-snapdragonUpgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-oemUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-170-powerpc-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1050-gcpUpgrade linux-image-4.15.0-1051-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.15.0-1065-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gke-5.0Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-170-powerpc64-smpUpgrade linux-image-4.4.0-170-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1099-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-72-generic-lpaeUpgrade linux-image-4.15.0-72-lowlatencyUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-4.4.0-170-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-4.15.0-1052-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1059-awsUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-72-genericUpgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-4.4.0-170-genericUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-24-genericUpgrade linux-image-4.15.0-1056-awsUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1049-gkeUpgrade linux-image-4.4.0-170-powerpc64-embUpgrade linux-image-azureUpgrade linux-image-5.3.0-24-generic-lpae | Dec 3, 2019 | Oct 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub