kernel: heap-based buffer overflow in lbs_ibss_join_existing function in drivers/net/wireless/marvell/libertas/cfg.c
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Red Hat | kernel | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | |||
| kernel-0:2.6.32-754.33.1.el6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2020:3548 | 2020-08-25T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-2068-1 | linux security update |
Debian DLA |
DLA-2114-1 | linux-4.9 security update |
EUVD |
EUVD-2019-6002 | A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP. |
Ubuntu USN |
USN-4225-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-4225-2 | Linux kernel (HWE) vulnerabilities |
Ubuntu USN |
USN-4226-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-4227-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-4227-2 | Linux kernel (Azure) vulnerabilities |
Ubuntu USN |
USN-4228-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-4228-2 | Linux kernel (Xenial HWE) vulnerabilities |
No CVSS v4.0
This CVE is not in the KEV list.
Exploit prediction score: 8.7% (8.667% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.