CVE-2019-3846: canonical ubuntu_linux Heap-based Buffer Overflow
Modified
AliasesUBUNTU-CVE-2019-3846DEBIAN-CVE-2019-3846
Published 03-06-2019Last modified 04-08-2024
Vulnerability summary
CVE-2019-3846 is a high (CVSS 8.8) Heap-based Buffer Overflow vulnerability in canonical ubuntu_linux. EPSS estimates a 5.88% chance of exploitation in the next 30 days, higher than 93.2% of scored vulnerabilities. 1 public exploit is recorded.
Priority
Prioritisepublic exploit
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?CVSS score
8.8/10
010
High · v3.1 (NVD)EPSS score
5.88%
0%100%
Low · +0.23 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1reference
Advisory lineage
Upstream 0 · Downstream 42 · Related 31DLA-1823-1DLA-1824-1DSA-4465-1MGASA-2019-0221OPENSUSE-SU-2019:1571-1OPENSUSE-SU-2019:1579-1OPENSUSE-SU-2024:10728-1OPENSUSE-SU-2024:13704-1RHSA-2019:2703RHSA-2019:2741RHSA-2019:3055RHSA-2019:3076RHSA-2019:3089RHSA-2020:0174RHSA-2020:2289SUSE-SU-2019:14127-1SUSE-SU-2019:1527-1SUSE-SU-2019:1529-1SUSE-SU-2019:1530-1SUSE-SU-2019:1532-1SUSE-SU-2019:1533-1SUSE-SU-2019:1534-1SUSE-SU-2019:1535-1SUSE-SU-2019:1536-1SUSE-SU-2019:1550-1SUSE-SU-2019:1581-1SUSE-SU-2019:1588-1SUSE-SU-2019:1668-1SUSE-SU-2019:1671-1SUSE-SU-2019:1674-1SUSE-SU-2019:1692-1SUSE-SU-2019:1765-1SUSE-SU-2019:1882-1SUSE-SU-2019:1948-1SUSE-SU-2019:2430-1SUSE-SU-2019:2450-1SUSE-SU-2019:2821-1USN-4093-1USN-4094-1USN-4095-1USN-4095-2USN-4118-1
Timeline
- 03-06-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.
CVSS metrics
8 scores · 4 sources · 4 versionsHigh 8.7Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NSourcesSingle source
High 8.8Preferred score · NVD (NIST)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 8.0Preferred score · CVE.org (CNA)
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated8.0HighCVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- NVDNIST8.0HighCVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
High 8.3Preferred score · NVD (NIST)
AV:A/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
5.88%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
Increase +0.23 pp
From 5.65% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundExploit Reference (seclists.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Version check
Known conditions: adjacent network, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu24 products
- linuxAll versions (No fix recorded) | < 4.4.0-159.187 | < 4.15.0-58.64
- linux-aws< 4.4.0-1054.58 | < 4.4.0-1090.101 | < 4.15.0-1047.49
- linux-aws-fips< 4.15.0-2018.18 | All versions (No fix recorded)
- linux-aws-hwe< 4.15.0-1047.49~16.04.1
- linux-azure< 4.15.0-1059.64~14.04.1
Netapp6 products
- a700s_firmwarena
- active_iq_unified_manager_for_vmware_vsphere≥ 9.5 (No fix recorded)
- cn1610_firmwarena
- h610s_firmwarena
- hci_management_nodena
Debian2 products
- linux< 4.19.37-4
- debian_linuxEOL8.0 | 9.0
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 19.04
Fedoraproject1 product
- fedoraEOL29 | 30
Linux1 product
- linux_kernel≥ 3.0, < 3.16.70 | ≥ 3.17, < 4.4.186 | ≥ 4.5, < 4.9.186 | ≥ 4.10, < 4.14.134 | ≥ 4.15, < 4.19.59 | ≥ 4.20, < 5.1.18
Opensuse1 product
- leapEOL15.0 | 15.1 | 42.3
Redhat1 product
- enterprise_linuxEOL6.0 | 7.0 | 8.0
8 vendors · 37 products
References
38 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3846X Refsource CONFIRMIssue TrackingMitigationPatchThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/06/msg00010.htmlMailing ListX Refsource MLISTThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/06/msg00011.htmlMailing ListX Refsource MLISTThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00040.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 38 references
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- packetstormsecurity.com/files/153702/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlX Refsource MISCThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.htmlX Refsource MISCThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlX Refsource MISCThird Party AdvisoryVDB Entry