CVE-2019-9503 vulnerabilities and exploits

(subscribe to this query)

7.9

CVSSv2

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the is_wlc_event_frame function will cause this frame to be discarde...

Broadcom Brcmfmac Driver -Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 7.0

NA

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9503. Reason: This candidate is a duplicate of CVE-2019-9503. Notes: All CVE users should reference CVE-2019-9503 instead of this candidate. All references and descriptions in this candidate have been removed...

4.6

CVSSv2

A flaw was found in the Linux kernel's freescale hypervisor manager implementation, kernel versions 5.0.x up to, excluding 5.0.17. A parameter passed to an ioctl was incorrectly validated and used in size calculations for the page size calculation. An attacker can use this f...

Linux Linux Kernel

7.9

CVSSv2

The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brc...

Broadcom Brcmfmac Driver -Linux Linux Kernel

2.1

CVSSv2

The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel prior to 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a '\0' character.

2.1

CVSSv2

The mincore() implementation in mm/mincore.c in the Linux kernel up to and including 4.19.13 allowed local malicious users to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the ou...

Linux Linux Kernel Netapp Element Software Management Node -Netapp Active Iq Performance Analytics Services -

1 Github repository1 Article

2.9

CVSSv2

An issue exists on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the a...

Apple Ipados Apple Iphone Os Apple Mac Os X Broadcom Bcm4389 Firmware -Broadcom Bcm43012 Firmware -Broadcom Bcm43013 Firmware -Broadcom Bcm4375 Firmware -Broadcom Bcm43752 Firmware -Broadcom Bcm4356 Firmware -

1 EDB exploit5 Github repositories2 Articles

6.9

CVSSv2

The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel prior to 5.0.8 has multiple race conditions.

Linux Linux Kernel Debian Debian Linux 9.0 Opensuse Leap 42.3 Opensuse Leap 15.1 Netapp Active Iq -Netapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Vasa Provider For Clustered Data Ontap 9.7 Netapp Storage Replication Adapter For Clustered Data Ontap 9.7 Netapp Virtual Storage Console 9.7

2.1

CVSSv2

fs/ext4/extents.c in the Linux kernel up to and including 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.

7.5

CVSSv2

A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook