cvelist/2019/14xxx/CVE-2019-14901.json

186 lines
7.5 KiB
JSON
Raw Normal View History

2019-11-29 15:01:11 +01:00
{
2023-02-02 21:02:01 +00:00
"data_version": "4.0",
2019-11-29 15:01:11 +01:00
"data_type": "CVE",
"data_format": "MITRE",
"CVE_data_meta": {
"ID": "CVE-2019-14901",
2019-11-29 15:01:05 +00:00
"ASSIGNER": "secalert@redhat.com",
"STATE": "PUBLIC"
2019-11-29 15:01:11 +01:00
},
2023-02-02 21:02:01 +00:00
"description": {
"description_data": [
{
"lang": "eng",
2023-02-12 23:01:07 +00:00
"value": "A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system."
2023-02-02 21:02:01 +00:00
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
2023-02-12 23:01:07 +00:00
"value": "CWE-400",
"cweId": "CWE-400"
}
]
},
{
"description": [
{
"lang": "eng",
"value": "CWE-122",
2023-02-02 21:02:01 +00:00
"cweId": "CWE-122"
}
]
}
]
},
2019-11-29 15:01:11 +01:00
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "Red Hat",
"product": {
"product_data": [
{
2023-02-12 23:01:07 +00:00
"product_name": "kernel",
2023-02-02 21:02:01 +00:00
"version": {
"version_data": [
{
2023-02-12 23:01:07 +00:00
"version_affected": "=",
"version_value": "all kernel versions 3.x.x and 4.x.x before 4.18.0"
2019-11-29 15:01:11 +01:00
}
]
}
}
]
}
}
]
}
},
2023-02-02 21:02:01 +00:00
"references": {
"reference_data": [
2019-11-29 15:01:11 +01:00
{
2023-02-02 21:02:01 +00:00
"url": "http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html",
"refsource": "MISC",
"name": "http://packetstormsecurity.com/files/156185/Kernel-Live-Patch-Security-Notice-LSN-0062-1.html"
2019-11-29 15:01:11 +01:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://access.redhat.com/errata/RHSA-2020:0328",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2020:0328"
},
2019-11-29 15:01:11 +01:00
{
2023-02-02 21:02:01 +00:00
"url": "https://access.redhat.com/errata/RHSA-2020:0339",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2020:0339"
2019-12-02 03:00:59 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://access.redhat.com/errata/RHSA-2020:0374",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2020:0374"
2019-12-02 03:00:59 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://access.redhat.com/errata/RHSA-2020:0375",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2020:0375"
2019-12-12 16:01:03 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://access.redhat.com/errata/RHSA-2020:0204",
"refsource": "MISC",
"name": "https://access.redhat.com/errata/RHSA-2020:0204"
2020-01-07 06:01:03 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html",
"refsource": "MISC",
"name": "https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html"
2020-01-07 06:01:03 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html",
"refsource": "MISC",
"name": "https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html"
2020-01-07 22:01:03 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://usn.ubuntu.com/4226-1/",
"refsource": "MISC",
"name": "https://usn.ubuntu.com/4226-1/"
2020-01-07 22:01:03 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html",
"refsource": "MISC",
"name": "http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00029.html"
2020-01-07 22:01:03 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "http://packetstormsecurity.com/files/155879/Kernel-Live-Patch-Security-Notice-LSN-0061-1.html",
"refsource": "MISC",
"name": "http://packetstormsecurity.com/files/155879/Kernel-Live-Patch-Security-Notice-LSN-0061-1.html"
2020-01-07 23:01:03 +00:00
},
2020-01-08 19:01:07 +00:00
{
2023-02-02 21:02:01 +00:00
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4ISVNIC44SOGXTUBCIZFSUNQJ5LRKNZ/",
2020-01-08 19:01:07 +00:00
"refsource": "MISC",
2023-02-02 21:02:01 +00:00
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4ISVNIC44SOGXTUBCIZFSUNQJ5LRKNZ/"
2020-01-18 07:01:15 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MN6MLCN7G7VFTSXSZYXKXEFCUMFBUAXQ/",
"refsource": "MISC",
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MN6MLCN7G7VFTSXSZYXKXEFCUMFBUAXQ/"
2020-01-23 18:01:08 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://usn.ubuntu.com/4225-1/",
"refsource": "MISC",
"name": "https://usn.ubuntu.com/4225-1/"
2020-01-30 11:01:12 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://usn.ubuntu.com/4225-2/",
"refsource": "MISC",
"name": "https://usn.ubuntu.com/4225-2/"
2020-02-03 19:01:11 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://usn.ubuntu.com/4227-1/",
2020-02-03 19:01:11 +00:00
"refsource": "MISC",
2023-02-02 21:02:01 +00:00
"name": "https://usn.ubuntu.com/4227-1/"
2020-02-04 12:01:28 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://usn.ubuntu.com/4227-2/",
"refsource": "MISC",
"name": "https://usn.ubuntu.com/4227-2/"
2020-02-04 16:01:14 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://usn.ubuntu.com/4228-1/",
"refsource": "MISC",
"name": "https://usn.ubuntu.com/4228-1/"
2020-02-05 00:01:11 +00:00
},
{
2023-02-02 21:02:01 +00:00
"url": "https://usn.ubuntu.com/4228-2/",
"refsource": "MISC",
"name": "https://usn.ubuntu.com/4228-2/"
2020-02-05 00:01:11 +00:00
},
2019-11-29 15:01:11 +01:00
{
2023-02-02 21:02:01 +00:00
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14901",
"refsource": "MISC",
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14901"
2019-11-29 15:01:11 +01:00
}
]
},
"impact": {
"cvss": [
2023-02-02 21:02:01 +00:00
{
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
2019-11-29 15:01:11 +01:00
]
}
2019-11-29 15:01:05 +00:00
}