CVE-2019-14897: Buffer Overflow
A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.107-1Fixed in 7.1.12-1Fixed in 7.1.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14897?
CVE-2019-14897 has a critical severity rating due to its potential for remote code execution and system crashes.
How do I fix CVE-2019-14897?
To mitigate CVE-2019-14897, upgrade to a kernel version 5.10.223-1 or later, or apply any relevant patches provided by your distribution.
Which versions of the Linux kernel are affected by CVE-2019-14897?
CVE-2019-14897 affects Linux kernel versions from 2.6.32 up to 5.4.16, excluding the latest updates.
What type of attack does CVE-2019-14897 allow?
CVE-2019-14897 allows an attacker to potentially execute arbitrary code or cause a denial of service in systems using the vulnerable Marvell WiFi chip driver.
Is CVE-2019-14897 a local or remote vulnerability?
CVE-2019-14897 can be exploited remotely when the affected system is in IBSS mode.