Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-debug | Dec 1, 2016 | Jun 7, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade kernel-trace-develUpgrade kernel-desktop-baseUpgrade lttng-modules-kmp-rtUpgrade kernel-debug-baseUpgrade kernel-pae-baseUpgrade ocfs2-kmp-rtUpgrade kernel-xen-extraUpgrade cluster-network-kmp-rt_traceUpgrade kernel-desktopUpgrade kernel-rt_trace-develUpgrade kernel-default-manUpgrade kernel-ppc64-baseUpgrade kernel-rt-develUpgrade kernel-traceUpgrade kernel-default-extraUpgrade kernel-pae-develUpgrade kernel-xen-develUpgrade kernel-bigsmpUpgrade ext4dev-kmp-paeUpgrade ocfs2-kmp-paeUpgrade kernel-syms-rtUpgrade kernel-bigsmp-develUpgrade kernel-xen-baseUpgrade kernel-ec2-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-docsUpgrade btrfs-kmp-defaultUpgrade ext4dev-kmp-defaultUpgrade drbd-kmp-rt_traceUpgrade hyper-v-kmp-paeUpgrade kernel-rtUpgrade kernel-ec2Upgrade kernel-symsUpgrade ocfs2-kmp-traceUpgrade hyper-v-kmp-defaultUpgrade kernel-ec2-develUpgrade cluster-network-kmp-defaultUpgrade kernel-vanillaUpgrade ocfs2-kmp-xenUpgrade ocfs2-kmp-defaultUpgrade sle-hae-releaseUpgrade kernel-debug-develUpgrade kernel-rt_traceUpgrade ofed-kmp-rtUpgrade kernel-ppc64Upgrade kernel-source-vanillaUpgrade ext4dev-kmp-xenUpgrade kernel-xenUpgrade kernel-default-baseUpgrade btrfs-kmp-xenUpgrade hyper-v-kmp-traceUpgrade cluster-network-kmp-ppc64Upgrade kernel-defaultUpgrade xen-kmp-traceUpgrade btrfs-kmp-paeUpgrade kernel-ppc64-develUpgrade cluster-network-kmp-traceUpgrade drbd-kmp-rtUpgrade kernel-sourceUpgrade iscsitarget-kmp-rtUpgrade kernel-bigsmp-baseUpgrade gfs2-kmp-paeUpgrade gfs2-kmp-bigsmpUpgrade kernel-pae-extraUpgrade ext4dev-kmp-traceUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade kernel-paeUpgrade gfs2-kmp-traceUpgrade cluster-network-kmp-bigsmpUpgrade kernel-rt-baseUpgrade ocfs2-kmp-ppc64Upgrade iscsitarget-kmp-rt_traceUpgrade kernel-trace-baseUpgrade ocfs2-kmp-bigsmpUpgrade kernel-source-rtUpgrade ofed-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade kernel-desktop-develUpgrade xen-kmp-paeUpgrade cluster-network-kmp-xenUpgrade lttng-modules-kmp-rt_traceUpgrade gfs2-kmp-xenUpgrade xen-kmp-defaultUpgrade kernel-rt_trace-baseUpgrade gfs2-kmp-ppc64Upgrade cluster-network-kmp-paeUpgrade kernel-default-develUpgrade ocfs2-kmp-rt_traceUpgrade kernel-vanilla-develUpgrade kernel-devel | Feb 17, 2015 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-49-versatileUpgrade linux-image-3.2.0-51-highbankUpgrade linux-image-2.6.32-49-powerpcUpgrade linux-image-3.2.0-51-powerpc64-smpUpgrade linux-image-3.2.0-51-generic-paeUpgrade linux-image-2.6.32-49-preemptUpgrade linux-image-2.6.32-49-lpiaUpgrade linux-image-3.5.0-37-omapUpgrade linux-image-3.2.0-51-virtualUpgrade linux-image-2.6.32-354-ec2Upgrade linux-image-2.6.32-49-powerpc64-smpUpgrade linux-image-2.6.32-49-generic-paeUpgrade linux-image-2.6.32-49-386Upgrade linux-image-3.5.0-37-genericUpgrade linux-image-3.2.0-51-powerpc-smpUpgrade linux-image-3.5.0-229-omap4Upgrade linux-image-3.2.0-51-omapUpgrade linux-image-2.6.32-49-virtualUpgrade linux-image-3.2.0-51-genericUpgrade linux-image-3.2.0-1436-omap4Upgrade linux-image-2.6.32-49-genericUpgrade linux-image-2.6.32-49-powerpc-smpUpgrade linux-image-3.5.0-37-highbankUpgrade linux-image-3.5.0-37-powerpc-smpUpgrade linux-image-2.6.32-49-sparc64Upgrade linux-image-3.8.0-29-genericUpgrade linux-image-3.5.0-37-powerpc64-smpUpgrade linux-image-2.6.32-49-serverUpgrade linux-image-2.6.32-49-ia64Upgrade linux-image-2.6.32-49-sparc64-smpUpgrade linux-image-3.8.0-27-generic | Nov 8, 2024 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub