CVE-2019-16746

CVSS v3.1 9.8 (Critical)

CVSS v2.0 7.5 (High)

EPSS 0.86 % (83^th)

Affected Products 5

Advisories 45

An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.

Weaknesses

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2019-09-24 06:15:10
(5 years ago)
Updated Date: 2023-11-07 03:05:42
(10 months ago)

Affected Products

Configuration #1

	CPE23	From	Up To
Linux Kernel from 2.6.25 version and prior 3.16.79 version	cpe:2.3:o:linux:linux_kernel	>= 2.6.25	< 3.16.79
Linux Kernel from 3.17 version and prior 4.4.197 version	cpe:2.3:o:linux:linux_kernel	>= 3.17	< 4.4.197
Linux Kernel from 4.5 version and prior 4.9.197 version	cpe:2.3:o:linux:linux_kernel	>= 4.5	< 4.9.197
Linux Kernel from 4.10 version and prior 4.14.149 version	cpe:2.3:o:linux:linux_kernel	>= 4.10	< 4.14.149
Linux Kernel from 4.15 version and prior 4.19.79 version	cpe:2.3:o:linux:linux_kernel	>= 4.15	< 4.19.79
Linux Kernel from 4.20 version and prior 5.3.6 version	cpe:2.3:o:linux:linux_kernel	>= 4.20	< 5.3.6

Configuration #2

		CPE23	From	Up To
	Debian Linux 8.0	cpe:2.3:o:debian:debian_linux:8.0

Configuration #3

		CPE23	From	Up To
	Canonical Ubuntu Linux 16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04:::*:esm
	Canonical Ubuntu Linux 18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04:::*:lts
	Canonical Ubuntu Linux 19.04	cpe:2.3:o:canonical:ubuntu_linux:19.04
	Canonical Ubuntu Linux 19.10	cpe:2.3:o:canonical:ubuntu_linux:19.10

Configuration #4

		CPE23	From	Up To
	Fedoraproject Fedora 30	cpe:2.3:o:fedoraproject:fedora:30
	Opensuse Leap 15.1	cpe:2.3:o:opensuse:leap:15.1

Weaknesses

Affected Products

Canonical

Debian

Fedoraproject

Linux

Opensuse

Configuration #1

Configuration #2

Configuration #3

Configuration #4