CVE-2019-17133

Description (CNA)

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00064.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00010.html
• https://seclists.org/bugtraq/2019/Nov/11
• https://usn.ubuntu.com/4211-2/
• https://usn.ubuntu.com/4208-1/
• https://usn.ubuntu.com/4210-1/
• https://usn.ubuntu.com/4211-1/
• https://usn.ubuntu.com/4226-1/
• https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
• https://access.redhat.com/errata/RHSA-2020:0174
• https://access.redhat.com/errata/RHSA-2020:0374
• https://access.redhat.com/errata/RHSA-2020:0375
• https://access.redhat.com/errata/RHSA-2020:0543
• https://access.redhat.com/errata/RHSA-2020:0592
• https://access.redhat.com/errata/RHSA-2020:0609
• https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
• https://access.redhat.com/errata/RHSA-2020:0653
• https://access.redhat.com/errata/RHSA-2020:0661
• https://access.redhat.com/errata/RHSA-2020:0664
• https://access.redhat.com/errata/RHSA-2020:0790
• https://www.oracle.com/security-alerts/cpuApr2021.html
• http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
• https://security.netapp.com/advisory/ntap-20191031-0005/
• https://marc.info/?l=linux-wireless&m=157018270915487&w=2

ADP enrichment