CVE-2020-36158HIGH
Description
mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.
References
https://github.com/torvalds/linux/commit/5c455c5ab332773464d02ba17015acdca198f03d
https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html
https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
https://lore.kernel.org/r/[email protected]
https://patchwork.kernel.org/project/linux-wireless/patch/[email protected]/
Details
Source: MITRE
Published: 2021-01-05
Updated: 2021-03-09
Type: CWE-120
Risk Information
CVSS v2.0
Base Score: 7.2
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Impact Score: 10
Exploitability Score: 3.9
Severity: HIGH
CVSS v3.0
Base Score: 6.7
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 0.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to 5.10.4 (inclusive)
Configuration 2
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 148041 | EulerOS 2.0 SP5 : kernel (EulerOS-SA-2021-1684) | Nessus | Huawei Local Security Checks | high |
| 148003 | Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4878-1) | Nessus | Ubuntu Local Security Checks | high |
| 148001 | Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4876-1) | Nessus | Ubuntu Local Security Checks | high |
| 147992 | Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4877-1) | Nessus | Ubuntu Local Security Checks | high |
| 147974 | Ubuntu 20.04 LTS / 20.10 : Linux kernel vulnerabilities (USN-4879-1) | Nessus | Ubuntu Local Security Checks | high |
| 147588 | EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2021-1386) | Nessus | Huawei Local Security Checks | high |
| 147532 | Debian DLA-2586-1 : linux security update | Nessus | Debian Local Security Checks | high |
| 146701 | EulerOS 2.0 SP2 : kernel (EulerOS-SA-2021-1311) | Nessus | Huawei Local Security Checks | high |
| 146512 | Debian DLA-2557-1 : linux-4.19 security update | Nessus | Debian Local Security Checks | high |
| 146511 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0452-1) | Nessus | SuSE Local Security Checks | high |
| 146476 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0437-1) | Nessus | SuSE Local Security Checks | high |
| 146474 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0438-1) | Nessus | SuSE Local Security Checks | high |
| 146470 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0434-1) | Nessus | SuSE Local Security Checks | high |
| 146401 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0408-1) | Nessus | SuSE Local Security Checks | high |
| 146362 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0348-1) | Nessus | SuSE Local Security Checks | high |
| 146352 | Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2021-9043) | Nessus | Oracle Linux Local Security Checks | high |
| 146305 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9041) (deprecated) | Nessus | Oracle Linux Local Security Checks | high |
| 146304 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9040) | Nessus | Oracle Linux Local Security Checks | high |
| 146300 | Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9035) | Nessus | Oracle Linux Local Security Checks | high |
| 146299 | Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9039) | Nessus | Oracle Linux Local Security Checks | high |
| 146282 | openSUSE Security Update : RT kernel (openSUSE-2021-242) | Nessus | SuSE Local Security Checks | high |
| 146261 | EulerOS : kernel (EulerOS-SA-2021-1265) | Nessus | Huawei Local Security Checks | high |
| 146248 | OracleVM 3.4 : Unbreakable / etc (OVMSA-2021-0005) | Nessus | OracleVM Local Security Checks | high |
| 146217 | EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-1246) | Nessus | Huawei Local Security Checks | high |
| 146096 | Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9030) | Nessus | Oracle Linux Local Security Checks | high |
| 146052 | Debian DSA-4843-1 : linux - security update | Nessus | Debian Local Security Checks | high |
| 145726 | EulerOS 2.0 SP8 : kernel (EulerOS-SA-2021-1148) | Nessus | Huawei Local Security Checks | high |
| 145459 | Photon OS 2.0: Linux PHSA-2021-2.0-0314 | Nessus | PhotonOS Local Security Checks | high |
| 145320 | openSUSE Security Update : the Linux Kernel (openSUSE-2021-60) | Nessus | SuSE Local Security Checks | high |
| 145287 | openSUSE Security Update : the Linux Kernel (openSUSE-2021-75) | Nessus | SuSE Local Security Checks | high |
| 145231 | Photon OS 1.0: Linux PHSA-2021-1.0-0354 | Nessus | PhotonOS Local Security Checks | high |
| 145120 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:0133-1) | Nessus | SuSE Local Security Checks | high |
| 145025 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2021:0117-1) | Nessus | SuSE Local Security Checks | high |
| 145018 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2021:0118-1) | Nessus | SuSE Local Security Checks | high |
| 144966 | Fedora 33 : kernel / kernel-headers (2021-3465ada1ca) | Nessus | Fedora Local Security Checks | high |
| 144959 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0108-1) | Nessus | SuSE Local Security Checks | high |
| 144908 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0095-1) | Nessus | SuSE Local Security Checks | high |