Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-14901
HistoryNov 29, 2019 - 3:15 p.m.

CVE-2019-14901

2019-11-2915:15:11
CWE-122
CWE-400
CWE-787
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON

A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.

Affected configurations

NVD
Node
linuxlinux_kernelRange3.15–3.16.83
OR
linuxlinux_kernelRange3.17–4.4.217
OR
linuxlinux_kernelRange4.5–4.9.217
OR
linuxlinux_kernelRange4.10–4.14.164
OR
linuxlinux_kernelRange4.15–4.19.95
OR
linuxlinux_kernelRange4.20–5.4.11
Node
fedoraprojectfedoraMatch30
OR
fedoraprojectfedoraMatch31
Node
debiandebian_linuxMatch8.0
Node
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch16.04esm
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch19.10

References

Related

prion 1
debiancve 1
redhatcve 1
cvelist 1
cve 1
ubuntucve 1
nessus 47
oraclelinux 5
f5 1
centos 2
redhat 6
openvas 43
ubuntu 7
cloudfoundry 1
slackware 1
fedora 13
androidsecurity 1
suse 1
debian 2
osv 2
ibm 2
prion
prion
Heap overflow
2019-11-29 15:15:00
debiancve
debiancve
CVE-2019-14901
2019-11-29 15:15:11
redhatcve
redhatcve
CVE-2019-14901
2020-04-14 19:25:57
cvelist
cvelist
CVE-2019-14901
2019-11-29 14:05:14
cve
cve
CVE-2019-14901
2019-11-29 15:15:11
ubuntucve
ubuntucve
CVE-2019-14901
2019-11-29 00:00:00
nessus
nessus
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5541)
2020-02-25 00:00:00
Fedora 31 : kernel (2019-91f6e7bb71)
2019-12-03 00:00:00
Fedora 30 : kernel (2019-8846a1a5a2)
2019-12-03 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2020-02-22 00:00:00
Unbreakable Enterprise kernel security update
2020-03-15 00:00:00
kernel security and bug fix update
2020-02-05 00:00:00
f5
f5
K54811521 : Linux kernel vulnerabilities CVE-2019-14815, CVE-2019-14895, CVE-2019-14901, CVE-2019-19055
2020-03-16 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2020-02-06 00:10:13
bpftool, kernel, perf, python security update
2020-02-26 17:10:16
redhat
redhat
(RHSA-2020:0375) Important: kernel-rt security and bug fix update
2020-02-04 17:47:28
(RHSA-2020:0374) Important: kernel security and bug fix update
2020-02-04 17:47:25
(RHSA-2020:1493) Important: kernel-alt security and bug fix update
2020-04-16 13:36:34
openvas
openvas
CentOS: Security Advisory for bpftool (CESA-2020:0375)
2020-02-06 00:00:00
CentOS: Security Advisory for bpftool (CESA-2020:0374)
2020-02-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2492-1)
2021-04-19 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2020-01-07 00:00:00
Linux kernel (Xenial HWE) vulnerabilities
2020-01-07 00:00:00
Linux kernel (Azure) vulnerabilities
2020-01-07 00:00:00
cloudfoundry
cloudfoundry
USN-4227-1: Linux kernel vulnerabilities | Cloud Foundry
2020-02-05 00:00:00
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2020-03-26 23:13:28
fedora
fedora
[SECURITY] Fedora 31 Update: kernel-5.3.13-300.fc31
2019-12-02 01:15:11
[SECURITY] Fedora 31 Update: kernel-5.5.6-201.fc31
2020-02-29 03:22:04
[SECURITY] Fedora 31 Update: kernel-5.4.12-200.fc31
2020-01-21 01:40:05
androidsecurity
androidsecurity
Pixel Update Bulletin—September 2020
2020-09-08 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2019-12-12 00:00:00
debian
debian
[SECURITY] [DLA 2068-1] linux security update
2020-01-18 04:38:12
[SECURITY] [DLA 2114-1] linux-4.9 security update
2020-03-02 18:14:56
osv
osv
linux - security update
2020-01-17 00:00:00
linux-4.9 - security update
2020-02-21 00:00:00
ibm
ibm
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
2021-02-02 05:06:51
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
2021-08-13 22:15:02

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON
Related for NVD:CVE-2019-14901
prion1debiancve1redhatcve1cvelist1cve1ubuntucve1nessus47oraclelinux5f51centos2redhat6openvas43ubuntu7cloudfoundry1slackware1fedora13androidsecurity1suse1debian2osv2ibm2