Lucene search

[email protected]CVE-2019-14896

HistoryNov 27, 2019 - 9:15 a.m.

CVE-2019-14896

2019-11-2709:15:11

CWE-787

CWE-122

[email protected]

web.nvd.nist.gov

287

cve-2019-14896

linux kernel

buffer overflow

marvell

wifi

nvd

security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.

Affected configurations

Vulners

NVD

Node

redhatkernelRange≤2.6.32

VendorProductVersionCPE
redhatkernel*cpe:2.3:a:redhat:kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	kernel	*	cpe:2.3:a:redhat:kernel::::::::

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "kernel-2.6.32"
      }
    ]
  }
]