CVE-2019-14895highCWE-122

CVE-2019-14895: high-severity vulnerability in Red Hat kernel

Published · Updated

Follow this CVE+ Monitor kernel+ Monitor linux

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8epss 7.8%
A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Red Hat · kernel
Related CVEs — Red Hat kernel

In the same product, most dangerous first.

CVE-2019-14901HIGHCVE-2019-14901EPSS 16.5%CVE-2019-14896HIGHCVE-2019-14896EPSS 8.7%CVE-2019-14897MEDIUMCVE-2019-14897EPSS 2.9%CVE-2020-25661HIGHCVE-2020-25661EPSS 1.8%CVE-2020-25662MEDIUMCVE-2020-25662EPSS 1.2%CVE-2019-10207MEDIUMCVE-2019-10207EPSS 0.9%