Wind River Support Network

HomeDefectsLIN1019-3705
Fixed

LIN1019-3705 : Security Advisory - linux - CVE-2019-14895

Created: Dec 3, 2019    Updated: Apr 22, 2022
Resolved Date: Jan 21, 2020
Found In Version: 10.19.45.1
Fix Version: 10.19.45.4
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Kernel

Description

A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.

CREATE(Triage):(User=admin) CVE-2019-14895 (https://nvd.nist.gov/vuln/detail/CVE-2019-14895)

CVEs


Live chat
Online