Arbitrary Code Execution

2020-07-0803:21:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

55.5%

JSON

kernel is vulnerable to arbitrary code execution. A heap-based buffer overflow in the mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c allows an attacker to execute arbitrary code on the system.

CPENameOperatorVersion
kerneleq4.18.0__147.6.el8
kerneleq3.10.0__229.7.2.ael7b
kerneleq3.10.0__514.16.1.el7
kerneleq3.10.0__229.11.1.ael7b
kerneleq3.10.0__693.17.1.el7
kerneleq3.10.0__862.2.3.el7
kerneleq3.10.0__514.26.2.el7
kerneleq4.18.0__168.el8
kerneleq3.10.0__957.1.3.el7
kerneleq3.10.0__957.el7

Name	Operator	Version
kernel	eq	4.18.0__147.6.el8
kernel	eq	3.10.0__229.7.2.ael7b
kernel	eq	3.10.0__514.16.1.el7
kernel	eq	3.10.0__229.11.1.ael7b
kernel	eq	3.10.0__693.17.1.el7
kernel	eq	3.10.0__862.2.3.el7
kernel	eq	3.10.0__514.26.2.el7
kernel	eq	4.18.0__168.el8
kernel	eq	3.10.0__957.1.3.el7
kernel	eq	3.10.0__957.el7