Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital Product Data (VPD) data structure.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-headersUpgrade kernel-xenUpgrade kernel-docUpgrade kernel-PAE-develUpgrade kernel-PAEUpgrade kernel-xen-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-devel | Dec 1, 2016 | Jun 7, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade ofed-kmp-rtUpgrade cluster-network-kmp-rtUpgrade kernel-ppc64-develUpgrade gfs2-kmp-bigsmpUpgrade xen-kmp-paeUpgrade ocfs2-kmp-bigsmpUpgrade cluster-network-kmp-ppc64Upgrade kernel-bigsmp-develUpgrade kernel-desktop-develUpgrade ocfs2-kmp-defaultUpgrade kernel-ppc64Upgrade cluster-network-kmp-rt_traceUpgrade kernel-docsUpgrade iscsitarget-kmp-rt_traceUpgrade gfs2-kmp-defaultUpgrade sle-hae-releaseUpgrade kernel-pae-extraUpgrade kernel-source-vanillaUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-defaultUpgrade kernel-trace-baseUpgrade kernel-rt_traceUpgrade kernel-rtUpgrade kernel-rt_trace-develUpgrade kernel-ppc64-baseUpgrade ofed-kmp-rt_traceUpgrade ocfs2-kmp-ppc64Upgrade xen-kmp-defaultUpgrade gfs2-kmp-traceUpgrade xen-kmp-traceUpgrade kernel-ec2-baseUpgrade cluster-network-kmp-bigsmpUpgrade gfs2-kmp-xenUpgrade kernel-rt_trace-baseUpgrade kernel-vanilla-develUpgrade gfs2-kmp-ppc64Upgrade kernel-default-baseUpgrade kernel-source-rtUpgrade kernel-xen-baseUpgrade kernel-paeUpgrade kernel-bigsmpUpgrade kernel-traceUpgrade ocfs2-kmp-rt_traceUpgrade ocfs2-kmp-xenUpgrade kernel-trace-develUpgrade kernel-symsUpgrade kernel-xen-develUpgrade kernel-debug-baseUpgrade lttng-modules-kmp-rt_traceUpgrade cluster-network-kmp-traceUpgrade cluster-network-kmp-xenUpgrade ocfs2-kmp-paeUpgrade kernel-sourceUpgrade kernel-develUpgrade cluster-network-kmp-paeUpgrade drbd-kmp-rtUpgrade lttng-modules-kmp-rtUpgrade cluster-network-kmp-defaultUpgrade kernel-xen-extraUpgrade iscsitarget-kmp-rtUpgrade kernel-bigsmp-baseUpgrade gfs2-kmp-paeUpgrade kernel-desktop-baseUpgrade drbd-kmp-rt_traceUpgrade kernel-ec2Upgrade kernel-desktopUpgrade kernel-ec2-develUpgrade kernel-pae-develUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade ocfs2-kmp-traceUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-rt-baseUpgrade kernel-syms-rtUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-trace-extraUpgrade kernel-rt-develUpgrade kernel-vanillaUpgrade kernel-xenUpgrade ocfs2-kmp-rt | Feb 17, 2015 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-31-omapUpgrade linux-image-3.2.0-44-virtualUpgrade linux-image-3.2.0-44-powerpc64-smpUpgrade linux-image-3.2.0-1432-omap4Upgrade linux-image-3.5.0-31-powerpc-smpUpgrade linux-image-3.5.0-225-omap4Upgrade linux-image-3.2.0-44-omapUpgrade linux-image-3.2.0-44-genericUpgrade linux-image-3.2.0-44-powerpc-smpUpgrade linux-image-3.2.0-44-highbankUpgrade linux-image-3.5.0-31-powerpc64-smpUpgrade linux-image-3.5.0-31-genericUpgrade linux-image-3.2.0-44-generic-paeUpgrade linux-image-3.5.0-31-highbank | Nov 8, 2024 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub