Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-10126

A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.

Published

2019-06-14T14:29:00.220

Last Modified

2024-11-21T04:18:28.067

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-122
  • Type: Secondary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System linux linux_kernel < 4.4.186 Yes
Operating System linux linux_kernel < 4.9.186 Yes
Operating System linux linux_kernel < 4.14.134 Yes
Operating System linux linux_kernel < 4.19.59 Yes
Operating System linux linux_kernel < 5.1.18 Yes
Application redhat virtualization 4.0 Yes
Operating System redhat enterprise_linux 8.0 Yes
Operating System redhat enterprise_linux_aus 8.2 Yes
Operating System redhat enterprise_linux_aus 8.4 Yes
Operating System redhat enterprise_linux_desktop 7.0 Yes
Operating System redhat enterprise_linux_eus 7.7 Yes
Operating System redhat enterprise_linux_eus 8.1 Yes
Operating System redhat enterprise_linux_eus 8.2 Yes
Operating System redhat enterprise_linux_eus 8.4 Yes
Operating System redhat enterprise_linux_for_real_time 7 Yes
Operating System redhat enterprise_linux_for_real_time 8 Yes
Operating System redhat enterprise_linux_for_real_time_for_nfv 7 Yes
Operating System redhat enterprise_linux_for_real_time_for_nfv_tus 8.2 Yes
Operating System redhat enterprise_linux_for_real_time_for_nfv_tus 8.4 Yes
Operating System redhat enterprise_linux_for_real_time_tus 8.2 Yes
Operating System redhat enterprise_linux_for_real_time_tus 8.4 Yes
Operating System redhat enterprise_linux_server 7.0 Yes
Operating System redhat enterprise_linux_server 8.0 Yes
Operating System redhat enterprise_linux_server_aus 7.7 Yes
Operating System redhat enterprise_linux_server_tus 7.7 Yes
Operating System redhat enterprise_linux_server_tus 8.2 Yes
Operating System redhat enterprise_linux_server_tus 8.4 Yes
Operating System redhat enterprise_linux_workstation 7.0 Yes
Operating System canonical ubuntu_linux 14.04 Yes
Operating System canonical ubuntu_linux 16.04 Yes
Operating System canonical ubuntu_linux 18.04 Yes
Operating System canonical ubuntu_linux 19.04 Yes
Operating System debian debian_linux 8.0 Yes
Operating System debian debian_linux 9.0 Yes
Operating System opensuse leap 15.0 Yes
Operating System opensuse leap 15.1 Yes
Application netapp active_iq_unified_manager ≥ 9.5 Yes
Application netapp hci_management_node - Yes
Application netapp solidfire - Yes
Operating System netapp a700s_firmware - Yes
Hardware netapp a700s - No
Operating System netapp cn1610_firmware - Yes
Hardware netapp cn1610 - No
Operating System netapp h610s_firmware - Yes
Hardware netapp h610s - No
References