blob: 9a7fc85813c0b330870a40fc80a8b6ac22b7c6c7 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
Description: Heap overflow in add_ie_rates() function of libertas Wifi Driver
References:
https://www.openwall.com/lists/oss-security/2019/11/22/1
https://patchwork.kernel.org/patch/11257187/
https://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers.git/commit/?id=e5e884b42639c74b5b57dc277909915c0aefc8bb
Notes:
bwh> Introduced in 2.6.36 by commit e86dc1ca4676 "Libertas: cfg80211 support".
carnil> Fixed as well in 5.4.16.
Bugs:
upstream: released (5.5) [e5e884b42639c74b5b57dc277909915c0aefc8bb]
4.19-upstream-stable: released (4.19.100) cbd56515be5a8ea97134ef762b7a2923b94cb9c4]
4.9-upstream-stable: released (4.9.212) [b5e6f199de3b7f16b641c4ec5ac92906af1a9232]
3.16-upstream-stable: needed
sid: pending (5.4.18-1)
4.19-buster-security: released (4.19.98-1) [bugfix/all/libertas-fix-two-buffer-overflows-at-parsing-bss-descriptor.patch]
4.9-stretch-security: needed
3.16-jessie-security: released (3.16.81-1) [bugfix/all/libertas-fix-two-buffer-overflows-at-parsing-bss-descriptor.patch]
|
