The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brcmf_wowl_nd_results function. This vulnerability can be exploited with compromised chipsets to compromise the host, or when used in combination with CVE-2019-9503, can be used remotely. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions.
CVSS Details
- CVSS 3.1 Base Score: 7.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel | Apr 27, 2020 | Jan 16, 2020 |
| Amazon_linux | — | Upgrade kernel | May 31, 2019 | May 14, 2019 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1062-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1062Upgrade kernel | Sep 4, 2019 | Sep 3, 2019 |
| Debian | — | Upgrade linux | Jun 18, 2019 | Jun 18, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Apr 20, 2020 | Jan 16, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 5, 2019 | Feb 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jan 16, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 4, 2019 | Sep 3, 2019 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-default | May 15, 2019 | May 14, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-5.0.0-1006-gcpUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1006-awsUpgrade linux-image-4.18.0-1014-raspi2Upgrade linux-image-5.0.0-1006-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.18.0-20-genericUpgrade linux-image-4.15.0-1039-awsUpgrade linux-image-4.18.0-1018-azureUpgrade linux-image-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-4.18.0-1011-gcpUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-5.0.0-1008-raspi2Upgrade linux-image-gkeUpgrade linux-image-5.0.0-15-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-15-genericUpgrade linux-image-4.18.0-20-snapdragonUpgrade linux-image-oracleUpgrade linux-image-5.0.0-15-generic-lpaeUpgrade linux-image-4.15.0-1036-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1038-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1053-snapdragonUpgrade linux-image-4.18.0-20-generic-lpaeUpgrade linux-image-5.0.0-1006-kvmUpgrade linux-image-4.15.0-1045-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-50-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-50-genericUpgrade linux-image-4.15.0-1013-oracleUpgrade linux-image-gcpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1032-gcpUpgrade linux-image-4.18.0-20-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.18.0-1012-kvmUpgrade linux-image-4.15.0-1034-kvmUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.18.0-1016-awsUpgrade linux-image-4.15.0-50-generic-lpae | May 15, 2019 | May 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub