CVE-2013-2852

Published: Jun 7, 2013Modified: Apr 29, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message.

Affected (9)

Products: Linux: Linux Kernel · Debian: Debian Linux · Canonical: Ubuntu Linux

1 product

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.12 to 3.0.83
Linux Linux Kernel	From 3.1 to 3.2.47
Linux Linux Kernel	From 3.3 to 3.4.50
Linux Linux Kernel	From 3.5 to 3.9.7

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 6.0

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 12.10
Canonical Ubuntu Linux	Version 13.04

Related CWEs

Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (36)

http://git.kernel.org/cgit/linux/kernel/git/linville/wireless.git/commit/?id=9538cbaab6e8b8046039b4b2eb6c9d614dc782bd

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html

Source: chrome-cve-admin@google.com

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2013-1051.html

Source: chrome-cve-admin@google.com

http://rhn.redhat.com/errata/RHSA-2013-1450.html

Source: chrome-cve-admin@google.com

http://www.debian.org/security/2013/dsa-2766

Source: chrome-cve-admin@google.com

http://www.openwall.com/lists/oss-security/2013/06/06/13

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1899-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1900-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1914-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1915-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1916-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1917-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1918-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1919-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1920-1

Source: chrome-cve-admin@google.com

http://www.ubuntu.com/usn/USN-1930-1

Source: chrome-cve-admin@google.com

https://bugzilla.redhat.com/show_bug.cgi?id=969518

Source: chrome-cve-admin@google.com

http://git.kernel.org/cgit/linux/kernel/git/linville/wireless.git/commit/?id=9538cbaab6e8b8046039b4b2eb6c9d614dc782bd

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1051.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-1450.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2013/dsa-2766

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/06/06/13

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1899-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1900-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1914-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1915-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1916-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1917-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1918-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1919-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1920-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1930-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=969518

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.