PT-2019-5254 · Broadcom+4 · Brcmfmac Wifi Driver+4
Hugues Anguelkov
·
Publicado
2019-02-19
·
Atualizado
2022-04-18
·
CVE-2019-9503
CVSS v3.1
8.3
Alta
| Vetor | AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
brcmfmac WiFi driver versions prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f
Description
The issue is related to insufficient input validation in the
is wlc event frame function of the Broadcom brcmfmac WiFi driver. This can be exploited by a remote, unauthenticated attacker to bypass frame validation, potentially allowing the execution of arbitrary code on a vulnerable system or resulting in denial-of-service conditions. The vulnerability can be triggered by sending specially-crafted WiFi packets.Recommendations
For versions prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f, consider updating to a version that includes the commit a4176ec356c73a46c07c181c6d04039fafa34a9f or later to resolve the issue. As a temporary workaround, consider restricting the use of USB WiFi dongles to minimize the risk of exploitation.
Correção
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Red Hat
Suse
Ubuntu
Brcmfmac Wifi Driver