QwikSec

Security Database

CVE

CWE

Training

CVE-2020-12653

Published: May 5, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.4

x_refsource_MISC

https://github.com/torvalds/linux/commit/b70261a288ea4d2f4ac7cd04be08a9f0f2de4f4d

x_refsource_MISC

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b70261a288ea4d2f4ac7cd04be08a9f0f2de4f4d

x_refsource_MISC

[oss-security] 20200508 Linux kernel: two buffer overflow in the marvell wifi driver

mailing-list

x_refsource_MLIST

https://security.netapp.com/advisory/ntap-20200608-0001/

x_refsource_CONFIRM

[debian-lts-announce] 20200609 [SECURITY] [DLA 2241-1] linux security update

mailing-list

x_refsource_MLIST

[debian-lts-announce] 20200610 [SECURITY] [DLA 2242-1] linux-4.9 security update

mailing-list

x_refsource_MLIST

[debian-lts-announce] 20200610 [SECURITY] [DLA 2241-2] linux security update

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_DEBIAN

openSUSE-SU-2020:0801

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.