CVE-2019-14814

Exploit

EPSS 0.87%
Veröffentlicht 20.09.2019 19:15:11
Zuletzt bearbeitet 21.11.2024 04:27:24
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 2 Referenzen 27

NVD 52 VulnDex Vulnerability Enrichment 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 3.7 < 3.16.74

Linux ≫ Linux Kernel Version >= 3.17 < 4.4.194

Linux ≫ Linux Kernel Version >= 4.5 < 4.9.194

Linux ≫ Linux Kernel Version >= 4.10 < 4.14.146

Linux ≫ Linux Kernel Version >= 4.15 < 4.19.75

Linux ≫ Linux Kernel Version >= 4.20 < 5.2.17

Redhat ≫ Enterprise Linux Version5.0

Redhat ≫ Enterprise Linux Version6.0

Redhat ≫ Enterprise Linux Version7.0

Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Enterprise Linux Eus Version8.1

Redhat ≫ Enterprise Linux Eus Version8.2

Redhat ≫ Enterprise Linux Eus Version8.4

Redhat ≫ Enterprise Linux For Real Time Version8

Redhat ≫ Enterprise Linux For Real Time For Nfv Version8

Redhat ≫ Enterprise Linux For Real Time For Nfv Tus Version8.2

Redhat ≫ Enterprise Linux For Real Time For Nfv Tus Version8.4

Redhat ≫ Enterprise Linux For Real Time Tus Version8.2

Redhat ≫ Enterprise Linux For Real Time Tus Version8.4

Redhat ≫ Enterprise Linux Server Aus Version8.2

Redhat ≫ Enterprise Linux Server Aus Version8.4

Redhat ≫ Enterprise Linux Server Tus Version8.2

Redhat ≫ Enterprise Linux Server Tus Version8.4

Redhat ≫ Messaging Realtime Grid Version2.0

Debian ≫ Debian Linux Version8.0

Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version19.04

Opensuse ≫ Leap Version15.0

Opensuse ≫ Leap Version15.1

Netapp ≫ Data Availability Services Version-

Netapp ≫ Hci Management Node Version-

Netapp ≫ Service Processor Version-

Netapp ≫ Solidfire Version-

Netapp ≫ Steelstore Cloud Integrated Storage Version-

Netapp ≫ A700s Firmware Version-

Netapp ≫ A700s Version-

Netapp ≫ A320 Firmware Version-

Netapp ≫ A320 Version-

Netapp ≫ C190 Firmware Version-

Netapp ≫ C190 Version-

Netapp ≫ A220 Firmware Version-

Netapp ≫ A220 Version-

Netapp ≫ Fas2720 Firmware Version-

Netapp ≫ Fas2720 Version-

Netapp ≫ Fas2750 Firmware Version-

Netapp ≫ Fas2750 Version-

Netapp ≫ A800 Firmware Version-

Netapp ≫ A800 Version-

Netapp ≫ H300s Firmware Version-

Netapp ≫ H300s Version-

Netapp ≫ H500s Firmware Version-

Netapp ≫ H500s Version-

Netapp ≫ H700s Firmware Version-

Netapp ≫ H700s Version-

Netapp ≫ H300e Firmware Version-

Netapp ≫ H300e Version-

Netapp ≫ H500e Firmware Version-

Netapp ≫ H500e Version-

Netapp ≫ H700e Firmware Version-

Netapp ≫ H700e Version-

Netapp ≫ H410s Firmware Version-

Netapp ≫ H410s Version-

Netapp ≫ H410c Firmware Version-

Netapp ≫ H410c Version-

Netapp ≫ H610s Firmware Version-

Netapp ≫ H610s Version-

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.87%	0.54

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
secalert@redhat.com	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://usn.ubuntu.com/4163-1/

Third Party Advisory

https://usn.ubuntu.com/4163-2/

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

Third Party Advisory

Mailing List

https://access.redhat.com/errata/RHSA-2020:0174

Third Party Advisory

http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

Third Party Advisory

VDB Entry

https://seclists.org/bugtraq/2019/Nov/11

Patch

Third Party Advisory

Mailing List

http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html

Third Party Advisory

VDB Entry

https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

Third Party Advisory

Mailing List

https://usn.ubuntu.com/4162-1/

Third Party Advisory

https://usn.ubuntu.com/4162-2/

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/

Third Party Advisory

https://usn.ubuntu.com/4157-1/

Third Party Advisory

https://usn.ubuntu.com/4157-2/

Third Party Advisory

https://security.netapp.com/advisory/ntap-20191031-0005/

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/08/28/1

Patch

Third Party Advisory

Exploit

Mailing List

https://access.redhat.com/errata/RHSA-2020:0328

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0339

Third Party Advisory

https://access.redhat.com/security/cve/cve-2019-14814

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14814

Patch

Third Party Advisory

Exploit

Issue Tracking

https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3a

Patch

Third Party Advisory

https://www.openwall.com/lists/oss-security/2019/08/28/1

Patch

Third Party Advisory

Exploit

Mailing List

https://nvd.nist.gov/vuln/detail/CVE-2019-14814

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-14814

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-14814

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-14814