CVE-2019-9502 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-9502 Interim 1 37 2025-02-17T02:12:05Z current 2021-05-30T14:25:43Z 2025-02-17T02:12:05Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-9502 The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.5 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 bcm43xx-firmware kernel-firmware ucode-amd bcm43xx-firmware as a component of SUSE CaaS Platform 4.5 bcm43xx-firmware as a component of SUSE Enterprise Storage 7 bcm43xx-firmware as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 bcm43xx-firmware as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS bcm43xx-firmware as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS bcm43xx-firmware as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS bcm43xx-firmware as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS kernel-firmware as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS ucode-amd as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS ucode-amd as a component of SUSE Linux Enterprise Micro 5.1 kernel-firmware as a component of SUSE Linux Enterprise Micro 5.1 ucode-amd as a component of SUSE Linux Enterprise Micro 5.2 kernel-firmware as a component of SUSE Linux Enterprise Micro 5.2 bcm43xx-firmware as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-firmware as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 ucode-amd as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 bcm43xx-firmware as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 ucode-amd as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-firmware as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-firmware as a component of SUSE Linux Enterprise Server 11 SP3 kernel-firmware as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata kernel-firmware as a component of SUSE Linux Enterprise Server 11 SP4 LTSS kernel-firmware as a component of SUSE Linux Enterprise Server 11 SP4-LTSS bcm43xx-firmware as a component of SUSE Linux Enterprise Server 12 SP3-LTSS bcm43xx-firmware as a component of SUSE Linux Enterprise Server 12 SP4 bcm43xx-firmware as a component of SUSE Linux Enterprise Server 15 SP2-LTSS bcm43xx-firmware as a component of SUSE Linux Enterprise Server 15-ESPOS kernel-firmware as a component of SUSE Linux Enterprise Server 15-ESPOS bcm43xx-firmware as a component of SUSE Linux Enterprise Server 15-LTSS kernel-firmware as a component of SUSE Linux Enterprise Server 15-LTSS ucode-amd as a component of SUSE Linux Enterprise Server 15-LTSS The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions. CVE-2019-9502 SUSE CaaS Platform 4.5:bcm43xx-firmware SUSE Enterprise Storage 7:bcm43xx-firmware SUSE Linux Enterprise High Performance Computing 12 SP4:bcm43xx-firmware SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:bcm43xx-firmware SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:bcm43xx-firmware SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:bcm43xx-firmware SUSE Linux Enterprise High Performance Computing 15-LTSS:bcm43xx-firmware SUSE Linux Enterprise Micro 5.1:kernel-firmware SUSE Linux Enterprise Micro 5.1:ucode-amd SUSE Linux Enterprise Micro 5.2:kernel-firmware SUSE Linux Enterprise Micro 5.2:ucode-amd SUSE Linux Enterprise Module for Basesystem 15 SP3:bcm43xx-firmware SUSE Linux Enterprise Module for Basesystem 15 SP3:kernel-firmware SUSE Linux Enterprise Module for Basesystem 15 SP3:ucode-amd SUSE Linux Enterprise Module for Basesystem 15 SP4:bcm43xx-firmware SUSE Linux Enterprise Module for Basesystem 15 SP4:kernel-firmware SUSE Linux Enterprise Module for Basesystem 15 SP4:ucode-amd SUSE Linux Enterprise Server 11 SP3 for Teradata:kernel-firmware SUSE Linux Enterprise Server 11 SP3:kernel-firmware SUSE Linux Enterprise Server 11 SP4 LTSS:kernel-firmware SUSE Linux Enterprise Server 11 SP4-LTSS:kernel-firmware SUSE Linux Enterprise Server 12 SP3-LTSS:bcm43xx-firmware SUSE Linux Enterprise Server 12 SP4:bcm43xx-firmware SUSE Linux Enterprise Server 15 SP2-LTSS:bcm43xx-firmware SUSE Linux Enterprise Server 15-ESPOS:bcm43xx-firmware SUSE Linux Enterprise Server 15-LTSS:bcm43xx-firmware SUSE Linux Enterprise High Performance Computing 15-LTSS:kernel-firmware SUSE Linux Enterprise High Performance Computing 15-LTSS:ucode-amd SUSE Linux Enterprise Server 15-ESPOS:kernel-firmware SUSE Linux Enterprise Server 15-LTSS:kernel-firmware SUSE Linux Enterprise Server 15-LTSS:ucode-amd important 8.3 AV:A/AC:L/Au:N/C:C/I:C/A:C 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H