Linux Kernel up to 5.2 IAPP Location Update input validation

Summaryinfo

A vulnerability labeled as problematic has been found in Linux Kernel up to 5.2. The affected element is an unknown function of the component IAPP Location Update Handler. Such manipulation leads to input validation. This vulnerability is documented as CVE-2019-5108. The attack requires being on the local network. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Linux Kernel up to 5.2 (Operating System). It has been rated as problematic. Affected by this issue is an unknown part of the component IAPP Location Update Handler. The manipulation with an unknown input leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Impacted is availability. CVE summarizes:

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.

The weakness was released 12/23/2019. This vulnerability is handled as CVE-2019-5108 since 01/04/2019. The exploitation is known to be easy. The attack needs to be done within the local network. No form of authentication is required for exploitation. The technical details are unknown and an exploit is not available.

The vulnerability scanner Nessus provides a plugin with the ID 208557 (CentOS 7 : kernel-alt (RHSA-2020:1493)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 5.3 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (208557). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 5.0
• 5.1
• 5.2

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion