CVE-2019-9502

🗓️ 03 Feb 2020 21:00:20Reported by certccType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 306 Views

The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system

Reporter	Title	Published	Views	Family All 23
ATTACKERKB	CVE-2019-15126 aka Kr00k	5 Feb 202000:00	–	attackerkb
Android Security Bulletins	Android Security Bulletin—July 2020Stay organized with collectionsSave and categorize content based on your preferences.	6 Jul 202000:00	–	androidsecurity
Circl	CVE-2019-9502	27 Jul 202510:51	–	circl
Cvelist	CVE-2019-9502 Broadcom wl driver is vulnerable to heap buffer overflow	3 Feb 202021:00	–	cvelist
EUVD	EUVD-2019-18876	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Two Heap Buffer Overflow Vulnerabilities in Broadcom WiFi Chipset Drivers	30 Oct 201900:00	–	huawei
Microsoft CVE	Microsoft HoloLens Remote Code Execution Vulnerabilities	11 Jun 201907:00	–	mscve
NVD	CVE-2019-9502	3 Feb 202021:15	–	nvd
Tenable Nessus	openSUSE 15 Security Update : kernel-firmware (openSUSE-SU-2021:1648-1)	31 Dec 202100:00	–	nessus
Tenable Nessus	RHEL 7 : linux-firmware (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus

NVD

Node

synology router_managerMatch1.2

Node

broadcom bcm4339_firmwareMatch-

AND

broadcom bcm4339Match-

[
  {
    "product": "WiFi drivers",
    "vendor": "Broadcom",
    "versions": [
      {
        "status": "affected",
        "version": "wl"
      }
    ]
  }
]

Source	Link
blog	www.blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html
kb	www.kb.cert.org/vuls/id/166939/

21 Nov 2024 04:51Current

7High risk

Vulners AI Score7

CVSS 28.3

CVSS 3.17.9 - 8.8

EPSS0.01413