CVE-2011-3359: Buffer Overflow
A flaw has been found in a way b43 driver processed incoming frames. An attacker able to send frames to the systems with Broadcom 43xx series wireless devices could use this flaw to crash the systems.
Upstream patch: c85ce65ecac078ab1a1835c87c4a6319cf74660a
References: https://bugzilla.kernel.org/showbug.cgi?id=32042 https://github.com/torvalds/linux/commits/c85ce65ecac078ab1a1835c87c4a6319cf74660a
Other sources
The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service (system crash) via a crafted frame.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What severity level is CVE-2011-3359?
CVE-2011-3359 is classified as a high severity vulnerability due to its potential to crash systems with affected Broadcom wireless devices.
How can I mitigate CVE-2011-3359?
To mitigate CVE-2011-3359, update your Linux kernel to version 2.6.39 or later where the flaw is patched.
Which systems are affected by CVE-2011-3359?
CVE-2011-3359 affects systems running Linux kernels prior to version 2.6.39 that utilize the b43 driver with Broadcom 43xx series wireless devices.
What type of vulnerability is CVE-2011-3359?
CVE-2011-3359 is a denial of service vulnerability that can be exploited by sending crafted frames to crash affected systems.
Is there an upstream fix for CVE-2011-3359?
Yes, the upstream patch for CVE-2011-3359 is identified in the commit c85ce65ecac078ab1a1835c87c4a6319cf74660a.