Lucene search

[email protected]CVE-2019-14901

HistoryNov 29, 2019 - 3:15 p.m.

CVE-2019-14901

2019-11-2915:15:11

CWE-787

CWE-400

CWE-122

[email protected]

web.nvd.nist.gov

435

cve-2019-14901

linux kernel

heap overflow

marvell wifi chip

remote code execution

system crash

denial of service

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON

A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.

Affected configurations

Vulners

NVD

Node

redhatkernelRange≤3.0.0

redhatkernelRange4.0.0–4.18.0

VendorProductVersionCPE
redhatkernel*cpe:2.3:a:redhat:kernel:*:*:*:*:*:*:*:*
redhatkernel*cpe:2.3:a:redhat:kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
redhat	kernel	*	cpe:2.3:a:redhat:kernel::::::::
redhat	kernel	*	cpe:2.3:a:redhat:kernel::::::::

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "all kernel versions 3.x.x and 4.x.x before 4.18.0"
      }
    ]
  }
]