← Back

CVE-2013-2038

nvd nist
Published: Feb 6, 2014Modified: Apr 29, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:N/A:P
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitrary code via a GPS packet with a malformed $GPGGA interpreted sentence that lacks certain fields and a terminator. NOTE: a separate issue in the AIS driver was also reported, but it might not be a vulnerability.

Affected (10)

Canonical
1 product
Ubuntu Linux
Gpsd Project
1 product
Gpsd
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Ubuntu Linux
Version 12.04
Gpsd Project
Gpsd
Up to 3.8
Gpsd
Version 3.0
Gpsd
Version 3.1
Gpsd
Version 3.2
Gpsd
Version 3.3
Gpsd
Version 3.4
Gpsd
Version 3.5
Gpsd
Version 3.6
Gpsd
Version 3.7

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

Source: secalert@redhat.com
ExploitPatch
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.