CVE-2019-14896

kernel: heap-based buffer overflow in lbs_ibss_join_existing function in drivers/net/wireless/marvell/libertas/cfg.c

Published Nov 27, 2019 CVSS 3.1 · 9.8 Critical EPSS 8.7% KEV · Not listed
Description
A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2068-1 linux security update
Debian DLA Debian DLA DLA-2114-1 linux-4.9 security update
EUVD EUVD EUVD-2019-6002 A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.
Ubuntu USN Ubuntu USN USN-4225-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-4225-2 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-4226-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-4227-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-4227-2 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-4228-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-4228-2 Linux kernel (Xenial HWE) vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 5, 2024, 12:26 AM
Reserved
Aug 10, 2019, 12:00 AM
Status
Modified
Published
Nov 27, 2019, 9:15 AM
Modified
Jun 17, 2026, 2:19 AM
Severity
Moderate
Public date
Nov 25, 2019, 8:33 AM