NVD

Id
40168  
Name
CVE-2013-4579  
Description
The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote attackers to discover the original MAC address after spoofing by sending a series of packets to MAC addresses with certain bit manipulations.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-11-20  
Modified Date
2014-03-16  
Seq
2013-4579  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204403 40168 CVE-2013-4579 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729573  View
204404 40168 CVE-2013-4579 http://www.mathyvanhoef.com/2013/11/unmasking-spoofed-mac-address.html  View
204405 40168 CVE-2013-4579 [oss-security] 20131114 Re: CVE request: ath9k_htc improperly updates MAC address  View
204406 40168 CVE-2013-4579 USN-2113-1  View
204407 40168 CVE-2013-4579 USN-2117-1  View
204408 40168 CVE-2013-4579 USN-2133-1  View
204409 40168 CVE-2013-4579 USN-2134-1  View
204410 40168 CVE-2013-4579 USN-2135-1  View
204411 40168 CVE-2013-4579 USN-2136-1  View
204412 40168 CVE-2013-4579 USN-2138-1  View
204413 40168 CVE-2013-4579 USN-2139-1  View
204414 40168 CVE-2013-4579 USN-2141-1  View
204415 40168 CVE-2013-4579 [ath9k-devel] 20131110 Security Bug: MAC address not properly configured  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23610 JVNDB-2013-005185 Linux Kernel の drivers/net/wireless/ath/ath9k/htc_drv_main.c における MAC アドレス偽装後に元の MAC アドレスを取得される脆弱性 Linux Kernel の drivers/net/wireless/ath/ath9k/htc_drv_main.c の ath9k_htc_set_bssid_mask 関数は、Wi-Fi (無線LAN) デバイスがリスニングしている MAC アドレスのセットを決定するのに BSSID マスキングアプローチを使用するため、MAC アドレス偽装後に元の MAC アドレスを取得される脆弱性が存在します。 CVE-2013-4579 64521 CVE-2013-4579 40168 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005185.html 2013-11-10 2013-11-21 View