CVE-2019-14814

🗓️ 20 Sep 2019 18:27:42Reported by redhatType

Heap-based buffer overflow in Linux kernel wifi chip drive

Reporter	Title	Published	Views	Family All 358
Tenable Nessus	CentOS 8 : kernel (CESA-2020:0339)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : kernel-alt (RHSA-2020:0174)	9 Oct 202400:00	–	nessus
Tenable Nessus	CentOS 7 : kernel (RHSA-2020:1016)	10 Apr 202000:00	–	nessus
Tenable Nessus	Debian DLA-1930-1 : linux security update	26 Sep 201900:00	–	nessus
Tenable Nessus	Debian DLA-2114-1 : linux-4.9 security update	6 Mar 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2019-2106)	12 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2201)	8 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : kernel (EulerOS-SA-2019-2274)	8 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.3.0 : kernel (EulerOS-SA-2019-2309)	3 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : kernel (EulerOS-SA-2019-2353)	10 Dec 201900:00	–	nessus

NVD

Vulners

Node

linux linux_kernelRange3.7–3.16.74

linux linux_kernelRange3.17–4.4.194

linux linux_kernelRange4.5–4.9.194

linux linux_kernelRange4.10–4.14.146

linux linux_kernelRange4.15–4.19.75

linux linux_kernelRange4.20–5.2.17

Node

redhat enterprise_linuxMatch5.0

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

redhat enterprise_linux_eusMatch8.1

redhat enterprise_linux_eusMatch8.2

redhat enterprise_linux_eusMatch8.4

redhat enterprise_linux_for_real_timeMatch8

redhat enterprise_linux_for_real_time_for_nfvMatch8

redhat enterprise_linux_for_real_time_for_nfv_tusMatch8.2

redhat enterprise_linux_for_real_time_for_nfv_tusMatch8.4

redhat enterprise_linux_for_real_time_tusMatch8.2

redhat enterprise_linux_for_real_time_tusMatch8.4

redhat enterprise_linux_server_ausMatch8.2

redhat enterprise_linux_server_ausMatch8.4

redhat enterprise_linux_server_tusMatch8.2

redhat enterprise_linux_server_tusMatch8.4

redhat messaging_realtime_gridMatch2.0

Node

debian debian_linuxMatch8.0

Node

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch16.04esm

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch19.04

Node

opensuse leapMatch15.0

opensuse leapMatch15.1

Node

netapp data_availability_servicesMatch-

netapp hci_management_nodeMatch-

netapp service_processorMatch-

netapp solidfireMatch-

netapp steelstore_cloud_integrated_storageMatch-

Node

netapp a700s_firmwareMatch-

AND

netapp a700sMatch-

Node

netapp a320_firmwareMatch-

AND

netapp a320Match-

Node

netapp c190_firmwareMatch-

AND

netapp c190Match-

Node

netapp a220_firmwareMatch-

AND

netapp a220Match-

Node

netapp fas2720_firmwareMatch-

AND

netapp fas2720Match-

Node

netapp fas2750_firmwareMatch-

AND

netapp fas2750Match-

Node

netapp a800_firmwareMatch-

AND

netapp a800Match-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300e_firmwareMatch-

AND

netapp h300eMatch-

Node

netapp h500e_firmwareMatch-

AND

netapp h500eMatch-

Node

netapp h700e_firmwareMatch-

AND

netapp h700eMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

netapp h610s_firmwareMatch-

AND

netapp h610sMatch-

[
  {
    "product": "kernel",
    "vendor": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "all versions up to, excluding 5.3"
      }
    ]
  }
]

Source	Link
usn	www.usn.ubuntu.com/4163-1/
access	www.access.redhat.com/errata/RHSA-2020:0328
access	www.access.redhat.com/errata/RHSA-2020:0339
github	www.github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3a
security	www.security.netapp.com/advisory/ntap-20191031-0005/
usn	www.usn.ubuntu.com/4157-1/
openwall	www.openwall.com/lists/oss-security/2019/08/28/1
packetstormsecurity	www.packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
packetstormsecurity	www.packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/

21 Nov 2024 04:27Current

9High risk

Vulners AI Score9

CVSS 27.2

CVSS 3.17.8

CVSS 35.5

EPSS0.00183