peter bassill · operator
$ cve CVE-2013-2852 JSON

CVE-2013-2852 EXPLOIT

6.9
MEDIUM · CVSS 2.0 · EPSS 1% (pctl 62)

Patch early

A public exploit exists.

Description

Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and including format string specifiers in an fwpostfix modprobe parameter, leading to improper construction of an error message.

Scoring

CVSS6.9 (MEDIUM, v2.0)
VectorAV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS1.02% — more likely to be exploited than 62% of all CVEs
WeaknessCWE-134
On CISA KEVno
Public exploityes
Published2013-06-07
Last modified2026-06-16

Affected (3)

VendorProduct
canonicalubuntu linux
debiandebian linux
linuxlinux kernel

Public exploits

SourceTitleDate
exploit-dbLinux Kernel 3.3.5 - 'b43' Wireless Driver Privilege Escalation2013-06-07

References

→ the Explorer  ·  watch your stack  ·  NVD