CVE-2013-4219: Buffer Overflow
Multiple integer overflows in the Intel WiMAX Network Service through 1.5.2 for Intel Wireless WiMAX Connection 2400 devices allow remote attackers to cause a denial of service (component crash) or possibly execute arbitrary code via an L5 connection with a crafted PDU value that triggers a heap-based buffer overflow within (1) L5SocketsDispatcher.c or (2) L5Connector.c.
Other sources
There are integer overflows leading to heap-based buffer overflows in the message processing in InfraStack/OSAgnostic/Product/AppSrvInfra/L5SocketsDispatcher.c. For example, in function l5socketsdispatcherHandleRequestMessage, there is this code:
pMessageCopy = OSALalloc( sizeof(tL5Message) + pReceivedMessage->dwSentBufferSize ); ... memcpy( pMessageCopy, pReceivedMessage, sizeof(tL5Message) + pReceivedMessage->dwSentBufferSize );
According to a comment in InfraStack/OSAgnostic/Common/L5Common/L5Common.h, the dwSentBufferSize value comes from the wire.
In InfraStack/OSAgnostic/Product/PipeHandler/L5Connector.c, functions PIPEHANDLERSendReceiveL5, l5connectorHandleRequestMessage seem to have a similar problem. Furthermore, endianess conversion is missing.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4219?
CVE-2013-4219 is considered a critical vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2013-4219?
To fix CVE-2013-4219, update the Intel WiMAX Network Service to version 1.5.2 or later.
What type of attack can exploit CVE-2013-4219?
CVE-2013-4219 can be exploited via crafted L5 connections that manipulate PDU values.
Which versions of Intel WiMAX Network Service are affected by CVE-2013-4219?
CVE-2013-4219 affects Intel WiMAX Network Service versions up to and including 1.5.2.
What kind of impacts can CVE-2013-4219 have on affected systems?
CVE-2013-4219 can lead to denial of service by crashing components and may allow remote code execution.