Linux Kernel Security Bypass and Heap Buffer Overflow Vulnerabilities
BID:108011
Info
Linux Kernel Security Bypass and Heap Buffer Overflow Vulnerabilities
| Bugtraq ID: | 108011 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2019-9503 CVE-2019-9500 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 17 2019 12:00AM |
| Updated: | Apr 17 2019 12:00AM |
| Credit: | Hugues Anguelkov |
| Vulnerable: |
Linux kernel 5.0.7 Linux kernel 5.0.4 Linux kernel 5.0.2 Linux kernel 4.7.4 Linux kernel 4.2.3 Linux kernel 4.1.4 Linux kernel 4.1.1 Linux kernel 4.0.6 Linux kernel 3.19.3 Linux kernel 3.18.22 Linux kernel 3.18.17 Linux kernel 3.18.11 Linux kernel 3.18.8 Linux kernel 3.18.7 Linux kernel 3.18.3 Linux kernel 3.18.2 Linux kernel 3.18.1 Linux kernel 3.17.4 Linux kernel 3.17.2 Linux kernel 3.16.7 Linux kernel 3.16.2 Linux kernel 3.16.1 Linux kernel 3.15.10 Linux kernel 3.15.5 Linux kernel 3.15.2 Linux kernel 3.14.54 Linux kernel 3.14.45 Linux kernel 3.14.37 Linux kernel 3.14.4 Linux kernel 3.14.3 Linux kernel 3.14.2 Linux kernel 3.13.11 Linux kernel 3.13.9 Linux kernel 3.13.3 Linux kernel 3.13.1 Linux kernel 3.12.49 Linux kernel 3.12.48 Linux kernel 3.12.44 Linux kernel 3.12.40 Linux kernel 3.12.21 Linux kernel 3.12.18 Linux kernel 3.12.17 Linux kernel 3.12.16 Linux kernel 3.12.11 Linux kernel 3.12.7 Linux kernel 3.12.4 Linux kernel 3.12.3 Linux kernel 3.12.2 Linux kernel 3.11.3 Linux kernel 3.10.90 Linux kernel 3.10.81 Linux kernel 3.10.73 Linux kernel 3.10.45 Linux kernel 3.10.41 Linux kernel 3.10.38 Linux kernel 3.10.36 Linux kernel 3.10.30 Linux kernel 3.10.27 Linux kernel 3.10.26 Linux kernel 3.10.23 Linux kernel 3.10.22 Linux kernel 3.10.21 Linux kernel 3.10.14 Linux kernel 3.10.10 Linux kernel 3.10.9 Linux kernel 3.10.7 Linux kernel 3.10 Linux kernel 3.8.9 Linux kernel 3.8.6 Linux kernel 3.8.5 Linux kernel 3.8.4 Linux kernel 3.8.2 Linux kernel 3.8.1 Linux kernel 3.7.10 Linux kernel 3.7.9 Linux kernel 3.7.8 Linux kernel 3.7.7 Linux kernel 3.7.5 Linux kernel 3.7.4 Linux kernel 3.7.3 Linux kernel 3.7.2 Linux kernel 3.7.1 Linux kernel 3.6.11 Linux kernel 3.6.10 Linux kernel 3.6.9 Linux kernel 3.6.8 Linux kernel 3.6.7 Linux kernel 3.6.6 Linux kernel 3.6.5 Linux kernel 3.6.4 Linux kernel 3.6.3 Linux kernel 3.6.2 Linux kernel 3.6.1 Linux kernel 3.5.7 Linux kernel 3.5.6 Linux kernel 3.5.5 Linux kernel 3.5.4 Linux kernel 3.5.3 Linux kernel 3.5.2 Linux kernel 3.5.1 Linux kernel 3.4.88 Linux kernel 3.4.87 Linux kernel 3.4.86 Linux kernel 3.4.80 Linux kernel 3.4.76 Linux kernel 3.4.73 Linux kernel 3.4.72 Linux kernel 3.4.71 Linux kernel 3.4.64 Linux kernel 3.4.58 Linux kernel 3.4.42 Linux kernel 3.4.36 Linux kernel 3.4.32 Linux kernel 3.4.31 Linux kernel 3.4.27 Linux kernel 3.4.26 Linux kernel 3.4.25 Linux kernel 3.4.21 Linux kernel 3.4.20 Linux kernel 3.4.19 Linux kernel 3.4.18 Linux kernel 3.4.17 Linux kernel 3.4.16 Linux kernel 3.4.15 Linux kernel 3.4.14 Linux kernel 3.4.13 Linux kernel 3.4.12 Linux kernel 3.4.11 Linux kernel 3.4.10 Linux kernel 3.4.9 Linux kernel 3.4.8 Linux kernel 3.4.7 Linux kernel 3.4.6 Linux kernel 3.4.5 Linux kernel 3.4.4 Linux kernel 3.4.3 Linux kernel 3.4.2 Linux kernel 3.4.1 Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.3.2 Linux kernel 3.2.82 Linux kernel 3.2.72 Linux kernel 3.2.62 Linux kernel 3.2.57 Linux kernel 3.2.56 Linux kernel 3.2.51 Linux kernel 3.2.24 Linux kernel 3.2.23 Linux kernel 3.2.13 Linux kernel 3.2.12 Linux kernel 3.2.9 Linux kernel 3.2.1 Linux kernel 5.1-rc1 Linux kernel 5.0rc6 Linux kernel 4.9 Linux kernel 4.8.7 Linux kernel 4.8.13 Linux kernel 4.8 Linux kernel 4.7.9 Linux kernel 4.7 Linux kernel 4.6 Linux kernel 4.5 Linux kernel 4.4.1 Linux kernel 4.4 Linux kernel 4.3.3 Linux kernel 4.2.8 Linux kernel 4.2 Linux kernel 4.1.15 Linux kernel 4.1 Linux kernel 4.0.5 Linux kernel 4.0 Linux kernel 3.9.8 Linux kernel 3.9.4 Linux kernel 3.9 Linux kernel 3.8 Linux kernel 3.7.6 Linux kernel 3.7 Linux kernel 3.6 Linux kernel 3.5-rc1 Linux kernel 3.5 Linux kernel 3.4.93 Linux kernel 3.4.81 Linux kernel 3.4.70 Linux kernel 3.4.67 Linux kernel 3.4.29 Linux kernel 3.4 Linux kernel 3.3 Linux kernel 3.2.81 Linux kernel 3.2.78 Linux kernel 3.2.65 Linux kernel 3.2.64 Linux kernel 3.2.63-2 Linux kernel 3.2.63 Linux kernel 3.2.60 Linux kernel 3.2.55 Linux kernel 3.2.54 Linux kernel 3.2.53 Linux kernel 3.2.52 Linux kernel 3.2.50 Linux kernel 3.2.44 Linux kernel 3.2.42 Linux kernel 3.2.38 Linux kernel 3.2.2 Linux kernel 3.2 Linux kernel 3.19 Linux kernel 3.18.9 Linux kernel 3.18 Linux kernel 3.17.6 Linux kernel 3.17 Linux kernel 3.16.6 Linux kernel 3.16.36 Linux kernel 3.16 Linux kernel 3.15 Linux kernel 3.14.73 Linux kernel 3.14.7 Linux kernel 3.14.5 Linux kernel 3.14-4 Linux kernel 3.14-1 Linux kernel 3.14 Linux kernel 3.13.7 Linux kernel 3.13.6 Linux kernel 3.13.5 Linux kernel 3.13.4 Linux kernel 3.13.0 Linux kernel 3.13 Linux kernel 3.12.22 Linux kernel 3.12.15 Linux kernel 3.12.14 Linux kernel 3.12.12 Linux kernel 3.12.1 Linux kernel 3.12 Linux kernel 3.11.9 Linux kernel 3.11.6 Linux kernel 3.11 Linux kernel 3.10.5 Linux kernel 3.10.43 Linux kernel 3.10.31 Linux kernel 3.10.20 Linux kernel 3.10.17 Linux kernel 3.10 Linux Kernal 3.4.70 Linux Kernal 3.2.52 Linux Kernal 3.10.20 Linux kerenl 3.4.33 Broadcom Wifi Driver 0 Broadcom BCM43430 7.45.98.38 Broadcom BCM43430 7.45.41.46 Broadcom BCM43430 7.45.41.26 Broadcom BCM4339 6.37.34.43 Broadcom BCM4330 5.90.100.250 |
| Not Vulnerable: | |
Discussion
Linux Kernel Security Bypass and Heap Buffer Overflow Vulnerabilities
Linux Kernel is prone to a security-bypass vulnerability and heap-based buffer-overflow vulnerability.
Attackers may exploit these issues to execute arbitrary code within the context of the affected application. Failed exploits may result in denial-of-service conditions.
Linux Kernel is prone to a security-bypass vulnerability and heap-based buffer-overflow vulnerability.
Attackers may exploit these issues to execute arbitrary code within the context of the affected application. Failed exploits may result in denial-of-service conditions.
Exploit / POC
Linux Kernel Security Bypass and Heap Buffer Overflow Vulnerabilities
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
Linux Kernel Security Bypass and Heap Buffer Overflow Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Linux Kernel Security Bypass and Heap Buffer Overflow Vulnerabilities
References:
References:
- Linux Homepage (Linux)
- Reverse-engineering Broadcom wireless chipsets (quarkslab.com)
- Bug 1701224 (CVE-2019-9500) - CVE-2019-9500 kernel: brcmfmac heap buffer overfl (Redhat)
- brcmfmac: assure SSID length from firmware is limited (Linux)
- CVE-2019-9500 (Redhat)
- VU#166939: Broadcom WiFi chipset drivers contain multiple vulnerabilities (CERT)