First published: Mon Jul 29 2013(Updated: )
Kees Cook discovered a format string vulnerability in the Broadcom B43 wireless driver for the Linux kernel. A local user could exploit this flaw to gain administrative privileges. (CVE-2013-2852) Marcus Moeller and Ken Fallon discovered that the CIFS incorrectly built certain paths. A local attacker with access to a CIFS partition could exploit this to crash the system, leading to a denial of service. (CVE-2013-4247)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.8.0-27-generic | <3.8.0-27.40 | 3.8.0-27.40 |
Ubuntu gir1.2-packagekitglib-1.0 | =13.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
USN-1919-1 is classified as a high severity vulnerability due to its potential to allow local users to gain administrative privileges.
To fix USN-1919-1, update the linux-image-3.8.0-27-generic package to version 3.8.0-27.40 or later.
USN-1919-1 affects Ubuntu version 13.04 utilizing the Broadcom B43 wireless driver.
USN-1919-1 is a format string vulnerability discovered in the Broadcom B43 wireless driver.
USN-1919-1 cannot be exploited remotely; it requires local user access to exploit the vulnerability.