Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-14815

Опубликовано: 28 авг. 2019
Источник: redhat
CVSS3: 7.8
EPSS Низкий

Описание

A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.

A vulnerability found in the Linux kernel's WMM implementation for Marvell WiFi-based hardware (mwifiex) could lead to a denial of service or allow arbitrary code execution. For this flaw to be executed, the attacker must be both local and privileged. There is no mitigation to this flaw. A patch has been provided to remediate this flaw.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kernelNot affected
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise MRG 2kernel-rtWill not fix
Red Hat Enterprise Linux 7kernel-rtFixedRHSA-2020:107031.03.2020
Red Hat Enterprise Linux 7kernel-altFixedRHSA-2020:017421.01.2020
Red Hat Enterprise Linux 7kernelFixedRHSA-2020:101631.03.2020
Red Hat Enterprise Linux 8kernel-rtFixedRHSA-2020:032804.02.2020
Red Hat Enterprise Linux 8kernelFixedRHSA-2020:033904.02.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=1744137kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS

EPSS

Процентиль: 35%
0.00138
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 5 лет назад

A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.

CVSS3: 7.8
nvd
больше 5 лет назад

A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.

CVSS3: 7.8
debian
больше 5 лет назад

A vulnerability was found in Linux Kernel, where a Heap Overflow was f ...

CVSS3: 7.8
github
около 3 лет назад

kernel is vulnerable to a None

CVSS3: 7.8
fstec
почти 6 лет назад

Уязвимость функции mwifiex_set_wmm_params() драйвера Wi-Fi Marvell ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

EPSS

Процентиль: 35%
0.00138
Низкий

7.8 High

CVSS3