Linux Kernel up to 3.x/4.17.x Marvell Wifi Chip Driver resource consumption

Summaryinfo

A vulnerability classified as critical has been found in Linux Kernel up to 3.x/4.17.x. This vulnerability affects unknown code of the component Marvell Wifi Chip Driver. Performing a manipulation results in resource consumption. This vulnerability was named CVE-2019-14901. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in Linux Kernel up to 3.x/4.17.x (Operating System). This affects some unknown processing of the component Marvell Wifi Chip Driver. The manipulation with an unknown input leads to a resource consumption vulnerability. CWE is classifying the issue as CWE-400. The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.

The weakness was presented 11/29/2019 (Website). It is possible to read the advisory at lists.fedoraproject.org. This vulnerability is uniquely identified as CVE-2019-14901 since 08/10/2019. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1499 according to MITRE ATT&CK.

The vulnerability scanner Nessus provides a plugin with the ID 208557 (CentOS 7 : kernel-alt (RHSA-2020:1493)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 4.18.0 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (208557). See VDB-146521 and VDB-146522 for similar entries. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 3.x
• 4.0
• 4.1
• 4.2
• 4.3
• 4.4
• 4.5
• 4.6
• 4.7
• 4.8
• 4.9
• 4.10
• 4.11
• 4.12
• 4.13
• 4.14
• 4.15
• 4.16
• 4.17

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion