cve/2019/CVE-2019-14814.md

### [CVE-2019-14814](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14814)
![](https://img.shields.io/static/v1?label=Product&message=kernel&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20all%20versions%20up%20to%2C%20excluding%205.3%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-122&color=brighgreen)

### Description

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

### POC

#### Reference
- http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
- http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

#### Github
- https://github.com/ARPSyndicate/cvemon