CVE-2013-2852
CVSS V2 Medium 6.9
CVSS V3 None
Description
Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message.
Overview
- CVE ID
- CVE-2013-2852
- Assigner
- cve-coordination@google.com
- Vulnerability Status
- Modified
- Published Version
- 2013-06-07T14:03:20
- Last Modified Date
- 2017-11-18T02:29:00
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 1 | OR | 3.9.4 | |
| cpe:2.3:o:linux:linux_kernel:3.9:rc1:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:linux:linux_kernel:3.9:rc2:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:linux:linux_kernel:3.9:rc3:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:linux:linux_kernel:3.9:rc4:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:linux:linux_kernel:3.9:rc5:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:linux:linux_kernel:3.9:rc6:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:linux:linux_kernel:3.9:rc7:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:linux:linux_kernel:3.9.0:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:linux:linux_kernel:3.9.1:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:linux:linux_kernel:3.9.2:*:*:*:*:*:*:* | 1 | OR | ||
| cpe:2.3:o:linux:linux_kernel:3.9.3:*:*:*:*:*:*:* | 1 | OR |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:L/AC:M/Au:N/C:C/I:C/A:C
- Access Vector
- LOCAL
- Access Compatibility
- MEDIUM
- Authentication
- NONE
- Confidentiality Impact
- COMPLETE
- Integrity Impact
- COMPLETE
- Availability Impact
- COMPLETE
- Base Score
- 6.9
- Severity
- MEDIUM
- Exploitability Score
- 3.4
- Impact Score
- 10
References
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2013-2852 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2852 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-05-10 08:11:12 | Added to TrackCVE | |||
| 2022-12-01 18:42:32 | security@google.com | cve-coordination@google.com | CVE Assigner | updated |
| 2022-12-01 18:42:32 | 2013-06-07T14:03Z | 2013-06-07T14:03:20 | CVE Published Date | updated |
| 2022-12-01 18:42:32 | 2017-11-18T02:29:00 | CVE Modified Date | updated | |
| 2022-12-01 18:42:32 | Modified | Vulnerability Status | updated |