CVE-2019-5108

Fixed in a distro release EPSS 10%CVSS 7.4

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to different denial-of-service scenarios, either by causing CAM table attacks, or by leading to traffic flapping if faking already existing clients in other nearby APs of the same wireless infrastructure. An attacker can forge Authentication and Association Request packets to trigger this vulnerability.

Published 2019-12-23 · CVE record · OSV

Products: linux_kernel, debian_linux, canonical ubuntu_linux, netapp active_iq_unified_manager, netapp cloud_backup, netapp data_availability_services, netapp e-series_santricity_os_controller, netapp hci_management_node, netapp solidfire, netapp steelstore_cloud_integrated_storage, netapp a700s_firmware, netapp h610s_firmware, netapp 8300_firmware, netapp 8700_firmware, netapp a400_firmware, oracle sd-wan_edge

Distro releases