critical9.8Public exploit code
CVE-2017-0561
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi S…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Broadcom Wi-Fi SoC - Heap Overflow 'wlc_tdls_cal_mic_chk' Due to Large RSN IE in TDLS Setup Confirm Frame2017-04-04 · dos · hardware · Verified
- Broadcom Wi-Fi SoC - TDLS Teardown Request Remote Heap Overflow2017-04-04 · remote · hardware · Verified
Impact
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi SoC. This issue is rated as Critical due to the possibility of remote code execution in the context of the Wi-Fi SoC. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-34199105. References: B-RB#110814.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | Versions 3.10, 3.18 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97367
- http://www.securitytracker.com/id/1038201
- https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html
- https://source.android.com/security/bulletin/2017-04-01
- https://www.exploit-db.com/exploits/41805/
- https://www.exploit-db.com/exploits/41806/
- http://www.securityfocus.com/bid/97367
- http://www.securitytracker.com/id/1038201
- https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html
- https://source.android.com/security/bulletin/2017-04-01
- https://www.exploit-db.com/exploits/41805/
- https://www.exploit-db.com/exploits/41806/