Svi
Pretraži prema proizvođaču
Pretraži prema CWE oznaci
O usluzi
Pretplate
Jezik
hr
en
CVE-2019-17133 - CERT CVE
CVE-2019-17133
ID
CVE-2019-17133
Sažetak
In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.
Reference
https://marc.info/?l=linux-wireless&m=157018270915487&w=2
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html
https://security.netapp.com/advisory/ntap-20191031-0005/
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html
https://seclists.org/bugtraq/2019/Nov/11
http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
https://usn.ubuntu.com/4208-1/
https://usn.ubuntu.com/4210-1/
https://usn.ubuntu.com/4211-2/
https://usn.ubuntu.com/4211-1/
https://usn.ubuntu.com/4226-1/
https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
https://access.redhat.com/errata/RHSA-2020:0174
https://access.redhat.com/errata/RHSA-2020:0375
https://access.redhat.com/errata/RHSA-2020:0374
https://access.redhat.com/errata/RHSA-2020:0543
https://access.redhat.com/errata/RHSA-2020:0592
https://access.redhat.com/errata/RHSA-2020:0609
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
https://access.redhat.com/errata/RHSA-2020:0653
https://access.redhat.com/errata/RHSA-2020:0661
https://access.redhat.com/errata/RHSA-2020:0664
https://access.redhat.com/errata/RHSA-2020:0790
https://www.oracle.com/security-alerts/cpuApr2021.html
CVSS
Base:
7.5
Impact:
6.4
Exploitability:
10.0
Pristup
Vektor
Složenost
Autentikacija
NETWORK
LOW
NONE
Impact
Povjerljivost
Cjelovitost
Dostupnost
PARTIAL
PARTIAL
PARTIAL
CVSS vektor
AV:N/AC:L/Au:N/C:P/I:P/A:P
Zadnje važnije ažuriranje
03-11-2022 - 02:41
Objavljeno
04-10-2019 - 12:15