CVE-2019-17133

CVSS v3.1 9.8 (Critical)

CVSS v2.0 7.5 (High)

EPSS 1.21 % (86^th)

Affected Products 4

Advisories 32

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

Weaknesses

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE Status: PUBLISHED
CNA: MITRE
Published Date: 2019-10-04 12:15:11
(5 years ago)
Updated Date: 2022-11-03 02:41:16
(22 months ago)

Affected Products

Canonical

Ubuntu Linux

Debian

Debian Linux

Linux

Linux Kernel

Opensuse

Leap

Configuration #1

		CPE23	From	Up To
	Linux Kernel from 2.6.32 version and prior 3.16.77 version	cpe:2.3:o:linux:linux_kernel	>= 2.6.32	< 3.16.77
	Linux Kernel from 3.17 version and prior 4.4.198 version	cpe:2.3:o:linux:linux_kernel	>= 3.17	< 4.4.198
	Linux Kernel from 4.5 version and prior 4.9.198 version	cpe:2.3:o:linux:linux_kernel	>= 4.5	< 4.9.198
	Linux Kernel from 4.10 version and prior 4.14.151 version	cpe:2.3:o:linux:linux_kernel	>= 4.10	< 4.14.151
	Linux Kernel from 4.15 version and prior 4.19.81 version	cpe:2.3:o:linux:linux_kernel	>= 4.15	< 4.19.81
	Linux Kernel from 4.20 version and prior 5.3.8 version	cpe:2.3:o:linux:linux_kernel	>= 4.20	< 5.3.8

Configuration #2

		CPE23	From	Up To
	Debian Linux 8.0	cpe:2.3:o:debian:debian_linux:8.0

Configuration #3

		CPE23	From	Up To
	Canonical Ubuntu Linux 14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04:::*:esm
	Canonical Ubuntu Linux 16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04:::*:esm
	Canonical Ubuntu Linux 18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04:::*:lts
	Canonical Ubuntu Linux 19.04	cpe:2.3:o:canonical:ubuntu_linux:19.04

Configuration #4

		CPE23	From	Up To
	Opensuse Leap 15.1	cpe:2.3:o:opensuse:leap:15.1