CVE-2019-14814

Description

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

Scores

Weaknesses (CWE)

• CWE-122
• CWE-787

European references

• ENISA EUVD · EUVD-2019-5943
• GCVE · GCVE-0-2019-14814

CERT-FR advisories

• CERTFR-2020-AVI-548 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
• CERTFR-2020-AVI-123 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
• CERTFR-2020-AVI-071 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
• CERTFR-2020-AVI-051 — Multiples vulnérabilités dans le noyau Linux de Red Hat · cert.ssi.gouv.fr
• CERTFR-2019-AVI-575 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
• CERTFR-2019-AVI-561 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
• CERTFR-2019-AVI-530 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
• CERTFR-2019-AVI-527 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
• CERTFR-2019-AVI-518 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
• CERTFR-2019-AVI-503 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
• CERTFR-2019-AVI-502 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
• CERTFR-2019-AVI-455 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.7 < 3.16.74
• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 3.17 < 4.4.194
• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.5 < 4.9.194
• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.10 < 4.14.146
• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.15 < 4.19.75
• cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 4.20 < 5.2.17
• cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_real_time:8:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.2:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.4:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.2:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.4:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
• cpe:2.3:o:redhat:messaging_realtime_grid:2.0:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
• cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
• cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
• cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:data_availability_services:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:service_processor:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
• cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:a320_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:c190_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:o:netapp:a220_firmware:-:*:*:*:*:*:*:*
• +12 more

Affected products

References

• http://www.openwall.com/lists/oss-security/2019/08/28/1
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14814
• https://www.openwall.com/lists/oss-security/2019/08/28/1
• https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3a
• https://access.redhat.com/security/cve/cve-2019-14814
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html
• https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
• https://usn.ubuntu.com/4157-1/
• https://usn.ubuntu.com/4162-1/
• https://usn.ubuntu.com/4157-2/
• https://usn.ubuntu.com/4163-1/
• https://usn.ubuntu.com/4163-2/
• https://usn.ubuntu.com/4162-2/
• http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
• https://security.netapp.com/advisory/ntap-20191031-0005/
• https://seclists.org/bugtraq/2019/Nov/11
• http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
• https://access.redhat.com/errata/RHSA-2020:0174
• https://access.redhat.com/errata/RHSA-2020:0328
• https://access.redhat.com/errata/RHSA-2020:0339
• https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html

Sources