CVE-2019-13625
published 2019-07-17CVE-2019-13625: NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.
PriorityP342critical9.1CVSS 3.0
AVNACLPRNUINSUCNIHAH
EPSS
2.40%
82.0th percentile
NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nsa | ghidra | < 9.0.1 | 9.0.1 |
CVSS provenance
nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
nvdv2.09.4CRITICALAV:N/AC:L/Au:N/C:N/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver
bugzilla·2019-08-21·CVSS 7.8
CVE-2019-14816 [HIGH] CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver
CVE-2019-14816 kernel: heap overflow in mwifiex_update_vs_ie() function of Marvell WiFi driver
There is heap-based buffer overflow in marvell wifi chip driver in Linux kernel while parsing vendor specific infomormational attributes allows an attacker on the same wifi physical network segment to cause a denial of service(system crash) or possibly execute arbitrary code.
Discussion:
Upstream patch:
https://lore.kernel.org/linux-wireless/[email protected]/
---
Acknowledgments:
Name: Huangwen (ADLab of Venustech)
---
References:
https://www.openwall.com/lists/oss-security/2019/08/28/1
---
External References:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7caac62ed598a196d6ddf8d9c121e12e082cac3a
---
Created kernel trackin
Bugzilla
CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates() function of Marvell Wifi Driver leading to DoS
bugzilla·2019-08-21·CVSS 7.8
CVE-2019-14814 [HIGH] CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates() function of Marvell Wifi Driver leading to DoS
CVE-2019-14814 kernel: heap overflow in mwifiex_set_uap_rates() function of Marvell Wifi Driver leading to DoS
A flaw was found in the Linux kernels implementation of marvell wifi driver which can allow a local user who has CAP_NET_ADMIN or administrative privileges to possibly cause a Denial Of Service (DOS) by corrupting memory and possible code execution.
Discussion:
Upstream patch:
https://lore.kernel.org/linux-wireless/[email protected]/
---
Acknowledgments:
Name: Huangwen (ADLab of Venustech)
---
*contents deleted*
---
References:
https://www.openwall.com/lists/oss-security/2019/08/28/1
---
External References:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7caac62ed598a196d6ddf8d9c121e12e082cac3a
---
Leaving
Bugzilla
CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS
bugzilla·2019-08-21·CVSS 7.8
CVE-2019-14815 [HIGH] CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS
CVE-2019-14815 kernel: heap-overflow in mwifiex_set_wmm_params() function of Marvell WiFi driver leading to DoS
A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.
Reference:
https://www.openwall.com/lists/oss-security/2019/08/28/1
https://lore.kernel.org/linux-wireless/[email protected]/
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14815
Discussion:
Acknowledgments:
Name: Huangwen (ADLab of Venustech)
---
For some reason, I'm not able to access bug 1744138, which I'd assume is the RHEL-8-specific bug I need to address in my wireless update... Can someone please take a look at this? Prepping a big wireless update for RHEL-8 right now, and want to include all these C
2019-07-17
Published