CVE-2013-1929

Published June 7th, 2013

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.4

MEDIUM

Affected

PROJECT

Description

Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via crafted firmware that specifies a long string in the Vital Product Data (VPD) data structure.

torvalds/linux

Linux kernel source tree

GitHub

237K