kernel: b43: format string leaking into error msgs
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| OpenStack 3 for RHEL 6 | |||
| kernel-0:2.6.32-358.114.1.openstack.el6 | cpe:/a:redhat:openstack:3::el6 | RHSA-2013:1080 | 2013-07-16T00:00:00Z |
| Red Hat Enterprise Linux 6 | |||
| kernel-0:2.6.32-358.14.1.el6 | cpe:/o:redhat:enterprise_linux:6 | RHSA-2013:1051 | 2013-07-16T00:00:00Z |
| Red Hat Enterprise Linux 6.3 EUS - Server and Compute Node Only | |||
| kernel-0:2.6.32-279.37.2.el6 | cpe:/o:redhat:rhel_eus:6.3 | RHSA-2013:1450 | 2013-10-22T00:00:00Z |
| Red Hat Enterprise MRG 2 | |||
| kernel-rt-0:3.6.11.5-rt37.55.el6rt | cpe:/a:redhat:enterprise_mrg:2:server:el6 | RHSA-2013:1264 | 2013-09-16T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2745-1 | linux security update |
Debian DSA |
DSA-2766-1 | linux-2.6 security update |
EUVD |
EUVD-2013-2791 | Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message. |
Ubuntu USN |
USN-1899-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-1900-1 | Linux kernel (EC2) vulnerabilities |
Ubuntu USN |
USN-1914-1 | Linux kernel vulnerability |
Ubuntu USN |
USN-1915-1 | Linux kernel (Quantal HWE) vulnerability |
Ubuntu USN |
USN-1917-1 | Linux kernel vulnerability |
Ubuntu USN |
USN-1918-1 | Linux kernel (OMAP4) vulnerability |
Ubuntu USN |
USN-1919-1 | Linux kernel vulnerability |
Ubuntu USN |
USN-1920-1 | Linux kernel (OMAP4) vulnerability |
Ubuntu USN |
USN-1930-1 | Linux kernel (OMAP4) vulnerabilities |
Ubuntu USN |
USN-1936-1 | Linux kernel (Raring HWE) vulnerabilities |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 1.0% (1.018% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.