NVD

Id
38062  
Name
CVE-2013-1929  
Description
Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital Product Data (VPD) data structure.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-06-07  
Modified Date
2014-01-03  
Seq
2013-1929  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194534 38062 CVE-2013-1929 http://cansecwest.com/slides/2013/PrivateCore%20CSW%202013.pdf  View
194535 38062 CVE-2013-1929 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=715230a44310a8cf66fbfb5a46f9a62a9b2de424  View
194536 38062 CVE-2013-1929 FEDORA-2013-5368  View
194537 38062 CVE-2013-1929 SUSE-SU-2013:1473  View
194538 38062 CVE-2013-1929 SUSE-SU-2013:1474  View
194539 38062 CVE-2013-1929 openSUSE-SU-2013:1971  View
194540 38062 CVE-2013-1929 RHSA-2013:1645  View
194541 38062 CVE-2013-1929 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.6  View
194542 38062 CVE-2013-1929 MDVSA-2013:176  View
194543 38062 CVE-2013-1929 [oss-security] 20130405 Re: CVE Request: tg3 VPD firmware -> driver injection  View
194544 38062 CVE-2013-1929 USN-1834-1  View
194545 38062 CVE-2013-1929 USN-1835-1  View
194546 38062 CVE-2013-1929 USN-1836-1  View
194547 38062 CVE-2013-1929 USN-1838-1  View
194548 38062 CVE-2013-1929 https://bugzilla.redhat.com/show_bug.cgi?id=949932  View
194549 38062 CVE-2013-1929 https://github.com/torvalds/linux/commit/715230a44310a8cf66fbfb5a46f9a62a9b2de424  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21342 JVNDB-2013-002917 Linux Kernel の drivers/net/ethernet/broadcom/tg3.c におけるヒープベースのバッファオーバーフローの脆弱性 Linux Kernel の drivers/net/ethernet/broadcom/tg3.c 内の tg3_read_vpd 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-1929 61871 CVE-2013-1929 38062 4.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002917.html 2013-03-27 2014-02-20 View