CVE-2019-14814

Exploit

EPSS 0.87%
Veröffentlicht 20.09.2019 19:15:11
Zuletzt bearbeitet 21.11.2024 04:27:24
Erkennungen
Login

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 2 Referenzen 27

NVD 52 VulnDex Vulnerability Enrichment 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 3.7 < 3.16.74

Linux ≫ Linux Kernel Version >= 3.17 < 4.4.194

Linux ≫ Linux Kernel Version >= 4.5 < 4.9.194

Linux ≫ Linux Kernel Version >= 4.10 < 4.14.146

Linux ≫ Linux Kernel Version >= 4.15 < 4.19.75

Linux ≫ Linux Kernel Version >= 4.20 < 5.2.17

Redhat ≫ Enterprise Linux Version 5.0

Redhat ≫ Enterprise Linux Version 6.0

Redhat ≫ Enterprise Linux Version 7.0

Redhat ≫ Enterprise Linux Version 8.0

Redhat ≫ Enterprise Linux Eus Version 8.1

Redhat ≫ Enterprise Linux Eus Version 8.2

Redhat ≫ Enterprise Linux Eus Version 8.4

Redhat ≫ Enterprise Linux For Real Time Version 8

Redhat ≫ Enterprise Linux For Real Time For Nfv Version 8

Redhat ≫ Enterprise Linux For Real Time For Nfv Tus Version 8.2

Redhat ≫ Enterprise Linux For Real Time For Nfv Tus Version 8.4

Redhat ≫ Enterprise Linux For Real Time Tus Version 8.2

Redhat ≫ Enterprise Linux For Real Time Tus Version 8.4

Redhat ≫ Enterprise Linux Server Aus Version 8.2

Redhat ≫ Enterprise Linux Server Aus Version 8.4

Redhat ≫ Enterprise Linux Server Tus Version 8.2

Redhat ≫ Enterprise Linux Server Tus Version 8.4

Redhat ≫ Messaging Realtime Grid Version 2.0

Debian ≫ Debian Linux Version 8.0

Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm

Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm

Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 19.04

Opensuse ≫ Leap Version 15.0

Opensuse ≫ Leap Version 15.1

Netapp ≫ Data Availability Services Version -

Netapp ≫ Hci Management Node Version -

Netapp ≫ Service Processor Version -

Netapp ≫ Solidfire Version -

Netapp ≫ Steelstore Cloud Integrated Storage Version -

Netapp ≫ A700s Firmware Version -

Netapp ≫ A700s Version -

Netapp ≫ A320 Firmware Version -

Netapp ≫ A320 Version -

Netapp ≫ C190 Firmware Version -

Netapp ≫ C190 Version -

Netapp ≫ A220 Firmware Version -

Netapp ≫ A220 Version -

Netapp ≫ Fas2720 Firmware Version -

Netapp ≫ Fas2720 Version -

Netapp ≫ Fas2750 Firmware Version -

Netapp ≫ Fas2750 Version -

Netapp ≫ A800 Firmware Version -

Netapp ≫ A800 Version -

Netapp ≫ H300s Firmware Version -

Netapp ≫ H300s Version -

Netapp ≫ H500s Firmware Version -

Netapp ≫ H500s Version -

Netapp ≫ H700s Firmware Version -

Netapp ≫ H700s Version -

Netapp ≫ H300e Firmware Version -

Netapp ≫ H300e Version -

Netapp ≫ H500e Firmware Version -

Netapp ≫ H500e Version -

Netapp ≫ H700e Firmware Version -

Netapp ≫ H700e Version -

Netapp ≫ H410s Firmware Version -

Netapp ≫ H410s Version -

Netapp ≫ H410c Firmware Version -

Netapp ≫ H410c Version -

Netapp ≫ H610s Firmware Version -

Netapp ≫ H610s Version -

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.87%	0.54

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://usn.ubuntu.com/4163-1/

Third Party Advisory

https://usn.ubuntu.com/4163-2/

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

Third Party Advisory

Mailing List

https://access.redhat.com/errata/RHSA-2020:0174

Third Party Advisory

http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

Third Party Advisory

VDB Entry

https://seclists.org/bugtraq/2019/Nov/11

Patch

Third Party Advisory

Mailing List

http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html

Third Party Advisory

VDB Entry

https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html

Third Party Advisory

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html

Third Party Advisory

Mailing List

https://usn.ubuntu.com/4162-1/

Third Party Advisory

https://usn.ubuntu.com/4162-2/

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/

Third Party Advisory

https://usn.ubuntu.com/4157-1/

Third Party Advisory

https://usn.ubuntu.com/4157-2/

Third Party Advisory

https://security.netapp.com/advisory/ntap-20191031-0005/

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/08/28/1

Patch

Third Party Advisory

Exploit

Mailing List

https://access.redhat.com/errata/RHSA-2020:0328

Third Party Advisory

https://access.redhat.com/errata/RHSA-2020:0339

Third Party Advisory

https://access.redhat.com/security/cve/cve-2019-14814

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14814

Patch

Third Party Advisory

Exploit

Issue Tracking

https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3a

Patch

Third Party Advisory

https://www.openwall.com/lists/oss-security/2019/08/28/1

Patch

Third Party Advisory

Exploit

Mailing List

https://nvd.nist.gov/vuln/detail/CVE-2019-14814

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-14814

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-14814

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-14814