vulnerability

SUSE: CVE-2019-17133: SUSE Linux Security Advisory

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Oct 4, 2019
Added
Oct 29, 2019
Modified
Feb 4, 2022

Description

In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

Solutions

suse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-kgraft-patch-3_12_74-60_64_110-defaultsuse-upgrade-kgraft-patch-3_12_74-60_64_110-xensuse-upgrade-kgraft-patch-3_12_74-60_64_115-defaultsuse-upgrade-kgraft-patch-3_12_74-60_64_115-xensuse-upgrade-kgraft-patch-3_12_74-60_64_118-defaultsuse-upgrade-kgraft-patch-3_12_74-60_64_118-xensuse-upgrade-kgraft-patch-3_12_74-60_64_121-defaultsuse-upgrade-kgraft-patch-3_12_74-60_64_121-xensuse-upgrade-kgraft-patch-3_12_74-60_64_124-defaultsuse-upgrade-kgraft-patch-3_12_74-60_64_124-xen

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.