Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-docUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-firmwareUpgrade perfUpgrade kernel-debug | Dec 1, 2016 | Jun 7, 2013 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 7, 2013 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 7, 2013 |
| Suse | — | Upgrade ofed-kmp-rt_traceUpgrade cluster-network-kmp-paeUpgrade cluster-network-kmp-rtUpgrade kernel-pae-extraUpgrade kernel-desktop-develUpgrade kernel-sourceUpgrade gfs2-kmp-paeUpgrade kernel-defaultUpgrade hyper-v-kmp-traceUpgrade ocfs2-kmp-defaultUpgrade lttng-modules-kmp-rt_traceUpgrade kernel-debug-develUpgrade sle-hae-releaseUpgrade kernel-develUpgrade gfs2-kmp-bigsmpUpgrade ofed-kmp-rtUpgrade cluster-network-kmp-xenUpgrade kernel-ppc64Upgrade iscsitarget-kmp-rt_traceUpgrade kernel-default-develUpgrade kernel-bigsmp-baseUpgrade kernel-vanilla-develUpgrade kernel-paeUpgrade drbd-kmp-rtUpgrade gfs2-kmp-traceUpgrade cluster-network-kmp-ppc64Upgrade kernel-debugUpgrade ext4dev-kmp-traceUpgrade kernel-rt-baseUpgrade ocfs2-kmp-ppc64Upgrade cluster-network-kmp-bigsmpUpgrade xen-kmp-defaultUpgrade gfs2-kmp-xenUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade btrfs-kmp-xenUpgrade ocfs2-kmp-bigsmpUpgrade gfs2-kmp-ppc64Upgrade cluster-network-kmp-traceUpgrade kernel-ppc64-develUpgrade kernel-default-baseUpgrade xen-kmp-paeUpgrade kernel-rt_traceUpgrade ext4dev-kmp-xenUpgrade kernel-xenUpgrade kernel-rt_trace-baseUpgrade iscsitarget-kmp-rtUpgrade xen-kmp-traceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-trace-baseUpgrade btrfs-kmp-paeUpgrade kernel-source-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-docsUpgrade btrfs-kmp-defaultUpgrade kernel-rt_trace-develUpgrade kernel-rt-develUpgrade kernel-desktopUpgrade kernel-default-manUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-xenUpgrade drbd-kmp-rt_traceUpgrade hyper-v-kmp-defaultUpgrade kernel-pae-baseUpgrade kernel-xen-baseUpgrade ocfs2-kmp-paeUpgrade ext4dev-kmp-paeUpgrade kernel-symsUpgrade ocfs2-kmp-traceUpgrade cluster-network-kmp-rt_traceUpgrade kernel-bigsmp-develUpgrade kernel-bigsmpUpgrade kernel-rtUpgrade kernel-ec2Upgrade kernel-debug-baseUpgrade kernel-syms-rtUpgrade kernel-ec2-develUpgrade kernel-pae-develUpgrade kernel-traceUpgrade hyper-v-kmp-paeUpgrade kernel-desktop-baseUpgrade kernel-vanillaUpgrade cluster-network-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-xen-extraUpgrade kernel-xen-develUpgrade kernel-default-extraUpgrade lttng-modules-kmp-rtUpgrade kernel-ec2-baseUpgrade ext4dev-kmp-defaultUpgrade kernel-ppc64-base | Feb 17, 2015 | Jun 7, 2013 |
| Ubuntu | — | Upgrade linux-image-3.5.0-37-highbankUpgrade linux-image-2.6.32-49-sparc64Upgrade linux-image-2.6.32-49-genericUpgrade linux-image-2.6.32-49-ia64Upgrade linux-image-3.5.0-37-powerpc-smpUpgrade linux-image-2.6.32-49-virtualUpgrade linux-image-2.6.32-49-sparc64-smpUpgrade linux-image-3.2.0-1436-omap4Upgrade linux-image-2.6.32-49-serverUpgrade linux-image-3.5.0-37-powerpc64-smpUpgrade linux-image-2.6.32-49-powerpc-smpUpgrade linux-image-3.2.0-51-genericUpgrade linux-image-3.8.0-29-genericUpgrade linux-image-3.8.0-27-genericUpgrade linux-image-2.6.32-49-386Upgrade linux-image-3.5.0-37-omapUpgrade linux-image-3.5.0-229-omap4Upgrade linux-image-3.2.0-51-virtualUpgrade linux-image-3.2.0-51-omapUpgrade linux-image-3.2.0-51-highbankUpgrade linux-image-2.6.32-354-ec2Upgrade linux-image-2.6.32-49-powerpc64-smpUpgrade linux-image-3.5.0-37-genericUpgrade linux-image-2.6.32-49-preemptUpgrade linux-image-3.2.0-51-generic-paeUpgrade linux-image-2.6.32-49-generic-paeUpgrade linux-image-3.2.0-51-powerpc64-smpUpgrade linux-image-2.6.32-49-versatileUpgrade linux-image-3.2.0-51-powerpc-smpUpgrade linux-image-2.6.32-49-powerpcUpgrade linux-image-2.6.32-49-lpia | Nov 8, 2024 | Jun 7, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub