CVE-2013-2038

2014-02-0617:00:04

CWE-20

redhat

web.nvd.nist.gov

nmea0183

gpsd

denial of service

arbitrary code execution

cve-2013-2038

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.7

Confidence

Low

EPSS

0.032

Percentile

91.2%

JSON

The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitrary code via a GPS packet with a malformed $GPGGA interpreted sentence that lacks certain fields and a terminator. NOTE: a separate issue in the AIS driver was also reported, but it might not be a vulnerability.

Affected configurations

Nvd

Node

gpsd_projectgpsdRange≤3.8

gpsd_projectgpsdMatch3.0

gpsd_projectgpsdMatch3.1

gpsd_projectgpsdMatch3.2

gpsd_projectgpsdMatch3.3

gpsd_projectgpsdMatch3.4

gpsd_projectgpsdMatch3.5

gpsd_projectgpsdMatch3.6

gpsd_projectgpsdMatch3.7

canonicalubuntu_linuxMatch12.04-lts

VendorProductVersionCPE
gpsd_projectgpsd*cpe:2.3:a:gpsd_project:gpsd:*:*:*:*:*:*:*:*
gpsd_projectgpsd3.0cpe:2.3:a:gpsd_project:gpsd:3.0:*:*:*:*:*:*:*
gpsd_projectgpsd3.1cpe:2.3:a:gpsd_project:gpsd:3.1:*:*:*:*:*:*:*
gpsd_projectgpsd3.2cpe:2.3:a:gpsd_project:gpsd:3.2:*:*:*:*:*:*:*
gpsd_projectgpsd3.3cpe:2.3:a:gpsd_project:gpsd:3.3:*:*:*:*:*:*:*
gpsd_projectgpsd3.4cpe:2.3:a:gpsd_project:gpsd:3.4:*:*:*:*:*:*:*
gpsd_projectgpsd3.5cpe:2.3:a:gpsd_project:gpsd:3.5:*:*:*:*:*:*:*
gpsd_projectgpsd3.6cpe:2.3:a:gpsd_project:gpsd:3.6:*:*:*:*:*:*:*
gpsd_projectgpsd3.7cpe:2.3:a:gpsd_project:gpsd:3.7:*:*:*:*:*:*:*
canonicalubuntu_linux12.04cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*

Vendor	Product	Version	CPE
gpsd_project	gpsd	*	cpe:2.3:a:gpsd_project:gpsd::::::::
gpsd_project	gpsd	3.0	cpe:2.3:a:gpsd_project:gpsd:3.0:::::::*
gpsd_project	gpsd	3.1	cpe:2.3:a:gpsd_project:gpsd:3.1:::::::*
gpsd_project	gpsd	3.2	cpe:2.3:a:gpsd_project:gpsd:3.2:::::::*
gpsd_project	gpsd	3.3	cpe:2.3:a:gpsd_project:gpsd:3.3:::::::*
gpsd_project	gpsd	3.4	cpe:2.3:a:gpsd_project:gpsd:3.4:::::::*
gpsd_project	gpsd	3.5	cpe:2.3:a:gpsd_project:gpsd:3.5:::::::*
gpsd_project	gpsd	3.6	cpe:2.3:a:gpsd_project:gpsd:3.6:::::::*
gpsd_project	gpsd	3.7	cpe:2.3:a:gpsd_project:gpsd:3.7:::::::*
canonical	ubuntu_linux	12.04	cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:::::*