CVE-2013-2852
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.0%
from disclosure to weapon0 days
Published on NVDJun 7
1st PoCJun 7
exploitation probability
1.0%top 40% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/38559⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://git.kernel.org/cgit/linux/kernel/git/linville/wireless.git/commit/?id=9538cbaab6e8b8046039b4b2eb6c9d614dc782bdhttp://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.htmlhttp://lists.opensuse.org/opensuse-updates/2013-12/msg00129.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1051.htmlhttp://rhn.redhat.com/errata/RHSA-2013-1450.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=969518http://www.debian.org/security/2013/dsa-2766http://www.openwall.com/lists/oss-security/2013/06/06/13http://www.ubuntu.com/usn/USN-1899-1http://www.ubuntu.com/usn/USN-1900-1http://www.ubuntu.com/usn/USN-1914-1http://www.ubuntu.com/usn/USN-1915-1