Multiple buffer overflows in drivers/staging/wlags49_h2/wl_priv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability and providing a long station-name string, related to the (1) wvlan_uil_put_info and (2) wvlan_set_station_nickname functions.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-grsec | Aug 30, 2017 | Nov 12, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 12, 2013 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-default-extraUpgrade iscsitarget-kmp-rtUpgrade kernel-rt-baseUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-xen-extraUpgrade cluster-network-kmp-paeUpgrade kernel-debug-develUpgrade drbd-kmp-rtUpgrade kernel-trace-baseUpgrade ocfs2-kmp-rtUpgrade drbd-kmp-rt_traceUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-trace-extraUpgrade kernel-default-develUpgrade kernel-ppc64Upgrade cluster-network-kmp-defaultUpgrade kernel-bigsmp-baseUpgrade ofed-kmp-rtUpgrade kernel-vanillaUpgrade cluster-network-kmp-traceUpgrade kernel-xenUpgrade kernel-paeUpgrade kernel-ec2-develUpgrade kernel-xen-develUpgrade kernel-desktopUpgrade kernel-traceUpgrade kernel-symsUpgrade cluster-network-kmp-xenUpgrade kernel-bigsmpUpgrade ocfs2-kmp-rt_traceUpgrade gfs2-kmp-paeUpgrade kernel-desktop-baseUpgrade kernel-trace-develUpgrade ocfs2-kmp-traceUpgrade kernel-ec2Upgrade kernel-pae-develUpgrade ocfs2-kmp-xenUpgrade kernel-pae-baseUpgrade kernel-develUpgrade kernel-xen-baseUpgrade gfs2-kmp-defaultUpgrade iscsitarget-kmp-rt_traceUpgrade gfs2-kmp-bigsmpUpgrade kernel-ec2-baseUpgrade xen-kmp-defaultUpgrade gfs2-kmp-xenUpgrade ocfs2-kmp-defaultUpgrade lttng-modules-kmp-rtUpgrade gfs2-kmp-ppc64Upgrade kernel-rt_trace-baseUpgrade ocfs2-kmp-ppc64Upgrade kernel-rtUpgrade kernel-desktop-develUpgrade kernel-pae-extraUpgrade xen-kmp-traceUpgrade gfs2-kmp-traceUpgrade cluster-network-kmp-rtUpgrade kernel-default-manUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade ofed-kmp-rt_traceUpgrade kernel-rt_trace-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-bigsmpUpgrade kernel-bigsmp-develUpgrade sle-hae-releaseUpgrade cluster-network-kmp-rt_traceUpgrade kernel-ppc64-develUpgrade kernel-ppc64-baseUpgrade kernel-vanilla-develUpgrade xen-kmp-paeUpgrade ocfs2-kmp-paeUpgrade kernel-syms-rtUpgrade cluster-network-kmp-bigsmpUpgrade kernel-docsUpgrade kernel-source-rtUpgrade kernel-debug-baseUpgrade cluster-network-kmp-ppc64Upgrade kernel-rt_trace | Jan 31, 2014 | Nov 12, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-58-highbankUpgrade linux-image-3.2.0-58-genericUpgrade linux-image-3.5.0-237-omap4Upgrade linux-image-3.8.0-35-genericUpgrade linux-image-3.2.0-58-powerpc-smpUpgrade linux-image-3.11.0-15-generic-lpaeUpgrade linux-image-3.5.0-45-genericUpgrade linux-image-3.5.0-45-highbankUpgrade linux-image-3.11.0-15-genericUpgrade linux-image-3.2.0-1442-omap4Upgrade linux-image-3.5.0-45-omapUpgrade linux-image-3.5.0-45-powerpc64-smpUpgrade linux-image-3.2.0-58-omapUpgrade linux-image-3.2.0-58-powerpc64-smpUpgrade linux-image-3.2.0-58-virtualUpgrade linux-image-3.5.0-45-powerpc-smpUpgrade linux-image-3.2.0-58-generic-pae | Nov 8, 2024 | Nov 12, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub