In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 22, 2020 | Oct 4, 2019 |
| Debian | — | Upgrade linux | Jan 20, 2020 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-develUpgrade perfUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libs | Dec 4, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo | Dec 18, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 11, 2019 | Oct 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade python3-perf | Nov 28, 2019 | Oct 4, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 6, 2020 | Oct 4, 2019 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 22, 2020 | Oct 4, 2019 |
| Suse | — | Upgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade kernel-default-extraUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kgraft-patch-3_12_74-60_64_121-defaultUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kernel-obs-buildUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kernel-docsUpgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kernel-default | Oct 29, 2019 | Oct 4, 2019 |
| Ubuntu | — | Upgrade linux-image-5.3.0-24-lowlatencyUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-170-powerpc64-embUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-170-genericUpgrade linux-image-awsUpgrade linux-image-4.15.0-72-genericUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1059-awsUpgrade linux-image-5.3.0-24-genericUpgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-5.3.0-24-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1052-raspi2Upgrade linux-image-raspi2Upgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-kvmUpgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-1049-gkeUpgrade linux-image-4.15.0-72-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-72-lowlatencyUpgrade linux-image-4.4.0-170-lowlatencyUpgrade linux-image-5.3.0-1009-gcpUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-5.3.0-1008-awsUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-4.4.0-170-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-4.15.0-1056-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1007-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gcp-edgeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-4.4.0-1130-snapdragonUpgrade linux-image-4.15.0-1051-kvmUpgrade linux-image-gcpUpgrade linux-image-5.3.0-24-snapdragonUpgrade linux-image-4.15.0-1050-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1065-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1063-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-4.4.0-170-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1030-oracleUpgrade linux-image-gke-5.0Upgrade linux-image-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-5.3.0-1008-kvmUpgrade linux-image-4.4.0-170-powerpc64-smpUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1069-snapdragonUpgrade linux-image-4.4.0-170-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oracle-edgeUpgrade linux-image-4.4.0-1126-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-virtual | Dec 3, 2019 | Oct 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub