Vulnerability DatabaseCVE-2020-36158
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2020-36158
January 05, 2021
mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.
Related Resources (15)
https://security-tracker.debian.org/tracker/CVE-2020-36158
https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html
https://lore.kernel.org/r/20201206084801.26479-1-ruc_zhangxiaohui%40163.com
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCHBIRS27VMOGMBHPWP2R7SZRFXT6O6U/
https://security.netapp.com/advisory/ntap-20210212-0002/
https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c455c5ab332773464d02ba17015acdca198f03d
https://www.debian.org/security/2021/dsa-4843
https://people.canonical.com/~ubuntu-security/cve/CVE-2020-36158
https://access.redhat.com/security/cve/CVE-2020-36158
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HCHBIRS27VMOGMBHPWP2R7SZRFXT6O6U/
https://github.com/torvalds/linux/commit/5c455c5ab332773464d02ba17015acdca198f03d
https://patchwork.kernel.org/project/linux-wireless/patch/20201206084801.26479-1-ruc_zhangxiaohui@163.com/
https://lore.kernel.org/r/20201206084801.26479-1-ruc_zhangxiaohui@163.com
https://patchwork.kernel.org/project/linux-wireless/patch/20201206084801.26479-1-ruc_zhangxiaohui%40163.com/
Do you need more information?
Contact Us
CVSS v4
Base Score:
8.7
Attack Vector
ADJACENT
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
HIGH
Vulnerable System Availability
HIGH
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
8.8
Attack Complexity
LOW
Attack Vector
ADJACENT
Availability
HIGH
Confidentiality
HIGH
Integrity
HIGH
Privileges Required
NONE
Scope
UNCHANGED
User Interaction
NONE
CVSS v2
Base Score:
7.2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
EPSS
Base Score:
0.58