exploitDog

CVE-2019-17133

Опубликовано: 04 окт. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2020:0174
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0374
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0375
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0543
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0592
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0609
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0653
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0661
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0664
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0790
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
Third Party Advisory
https://marc.info/?l=linux-wireless&m=157018270915487&w=2
Mailing List
Patch
Third Party Advisory
https://seclists.org/bugtraq/2019/Nov/11
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20191031-0005/
Third Party Advisory
https://usn.ubuntu.com/4208-1/
Third Party Advisory
https://usn.ubuntu.com/4210-1/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.32 (включая) до 3.16.77 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.17 (включая) до 4.4.198 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.5 (включая) до 4.9.198 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.10 (включая) до 4.14.151 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.15 (включая) до 4.19.81 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 4.20 (включая) до 5.3.8 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01955

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2019-17133

CVSS3: 9.8

ubuntu

больше 5 лет назад

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

CVE-2019-17133

CVSS3: 8

redhat

больше 5 лет назад

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

CVE-2019-17133

CVSS3: 9.8

debian

больше 5 лет назад

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/w ...

GHSA-4v38-w5qx-qhmh

CVSS3: 9.8

github

около 3 лет назад

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

BDU:2020-00078

CVSS3: 9.8

fstec

больше 5 лет назад

Уязвимость функции cfg80211_mgd_wext_giwessid (net/wireless/wext-sme.c) ядра операционной системы Linux, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

EPSS

Процентиль: 83%

0.01955

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-120