CVE-2013-2852
First published: Fri May 31 2013(Updated: )
Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message.
Credit: cve-coordination@google.com chrome-cve-admin@google.com cve-coordination@google.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | >=2.6.12<3.0.83 | |
| Linux Linux kernel | >=3.1<3.2.47 | |
| Linux Linux kernel | >=3.3<3.4.50 | |
| Linux Linux kernel | >=3.5<3.9.7 | |
| Debian Debian Linux | =6.0 | |
| Canonical Ubuntu Linux | =10.04 | |
| Canonical Ubuntu Linux | =12.04 | |
| Canonical Ubuntu Linux | =12.10 | |
| Canonical Ubuntu Linux | =13.04 | |
| debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.11.10-1 6.12.3-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://git.kernel.org/cgit/linux/kernel/git/linville/wireless.git/commit/?id=9538cbaab6e8b8046039b4b2eb6c9d614dc782bd
- http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html
- http://rhn.redhat.com/errata/RHSA-2013-1051.html
- http://rhn.redhat.com/errata/RHSA-2013-1450.html
- http://www.debian.org/security/2013/dsa-2766
- http://www.openwall.com/lists/oss-security/2013/06/06/13
- http://www.ubuntu.com/usn/USN-1899-1
- http://www.ubuntu.com/usn/USN-1900-1
- http://www.ubuntu.com/usn/USN-1914-1
- http://www.ubuntu.com/usn/USN-1915-1
- http://www.ubuntu.com/usn/USN-1916-1
- http://www.ubuntu.com/usn/USN-1917-1
- http://www.ubuntu.com/usn/USN-1918-1
- http://www.ubuntu.com/usn/USN-1919-1
- http://www.ubuntu.com/usn/USN-1920-1
- http://www.ubuntu.com/usn/USN-1930-1
- https://bugzilla.redhat.com/show_bug.cgi?id=969518
- https://launchpad.net/bugs/cve/CVE-2013-2852
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=971665
- https://rhn.redhat.com/errata/RHSA-2013-1080.html
- https://rhn.redhat.com/errata/RHSA-2013-1051.html
- https://rhn.redhat.com/errata/RHSA-2013-1264.html
- https://rhn.redhat.com/errata/RHSA-2013-1450.html
- https://security-tracker.debian.org/tracker/CVE-2013-2852
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2852
- https://nvd.nist.gov/vuln/detail/CVE-2013-2852
- https://ubuntu.com/security/CVE-2013-2852
- collector/nvd-api
- collector/nvd-index
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2013-2852
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/author
- agent/severity
- agent/remedy
- agent/description
- agent/event
- agent/references
- agent/tags
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/usn-cve
- source/Ubuntu
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/2.6.12
- version/linux linux kernel/3.1
- version/linux linux kernel/3.3
- version/linux linux kernel/3.5
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/6.0
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/10.04
- version/canonical ubuntu linux/12.04
- version/canonical ubuntu linux/12.10
- version/canonical ubuntu linux/13.04
- package-manager/debian