CVE-2019-14815

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122 CWE-787

Affected software

Vendor	Product	Versions
Linux	kernel	n/a

References

https://access.redhat.com/errata/RHSA-2020:0174Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0328Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0339Third Party Advisory
https://access.redhat.com/security/cve/cve-2019-14815Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14815Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3aIssue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlMailing List, Third Party Advisory
https://lore.kernel.org/linux-wireless/20190828020751.13625-1-huangwenabc%40gmail.comIssue Tracking, Mailing List, Patch, Vendor Advisory
https://security.netapp.com/advisory/ntap-20200103-0001/Mailing List, Patch, Third Party Advisory
https://www.openwall.com/lists/oss-security/2019/08/28/1Mailing List, Patch, Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0174Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0328Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0339Third Party Advisory
https://access.redhat.com/security/cve/cve-2019-14815Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14815Issue Tracking, Third Party Advisory
https://github.com/torvalds/linux/commit/7caac62ed598a196d6ddf8d9c121e12e082cac3aIssue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/03/msg00001.htmlMailing List, Third Party Advisory
https://lore.kernel.org/linux-wireless/20190828020751.13625-1-huangwenabc%40gmail.comIssue Tracking, Mailing List, Patch, Vendor Advisory
https://security.netapp.com/advisory/ntap-20200103-0001/Mailing List, Patch, Third Party Advisory
https://www.openwall.com/lists/oss-security/2019/08/28/1Mailing List, Patch, Third Party Advisory

Timeline

Published: Nov 25, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-148167.8There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allo CVE-2019-148177.8A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its priv CVE-2019-148187.5A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a CVE-2019-148198.8A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is as CVE-2019-148204.3It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be CVE-2019-148218.8An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements t CVE-2019-148227.1A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus o CVE-2019-148237.4A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it impli CVE-2019-148246.5A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some config CVE-2019-148252.7A cleartext password storage issue was discovered in Katello, versions 3.x.x.x before katello 3.12.0.9. Registry credentials used during con CVE-2019-148264.4A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this CVE-2019-148276.1A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive rendering from contexts