PT-2013-4907 · Intel · Intel Wimax Network Service

Published 2013-08-25 · Updated 2013-08-26 · CVE-2013-4219

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Intel WiMAX Network Service versions through 1.5.2

Description The issue is caused by multiple integer overflows that can lead to a denial of service or possibly allow the execution of arbitrary code. This can be triggered by a crafted PDU value in an L5 connection, resulting in a heap-based buffer overflow within specific files, including L5SocketsDispatcher.c and L5Connector.c.

Recommendations For Intel WiMAX Network Service versions through 1.5.2, update to a version later than 1.5.2 to resolve the issue.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2013-4219

Affected Products

Intel Wimax Network Service

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4219 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=911129 · Note
• http://openwall.com/lists/oss-security/2013/08/08/17 · Note