CVE-2019-16746

KRITISCH 9.8CVE-2019-16746 · Published 24/09/2019 · updated 17/06/2026

Kurz gesagt

CVE-2019-16746 ist eine Schwachstelle (KRITISCH (CVSS 9.8)).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 12.7%, höher als bei 96.3% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon head, leading to a buffer overflow.

References

lists.opensuse.org/opensuse-security-announce/2020-03/msg00021.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.html · Mailing List
packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html · Third Party Advisory
lists.debian.org/debian-lts-announce/2020/01/msg00013.html · Mailing List
lists.debian.org/debian-lts-announce/2020/03/msg00001.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TASE2ESEZAER6DTZH3DJ4K2JNO46TVL7
marc.info · Mailing List
seclists.org/bugtraq/2019/Nov/11 · Mailing List
security.netapp.com/advisory/ntap-20191031-0005 · Third Party Advisory
usn.ubuntu.com/4183-1 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free