Arend van Spriel

2 exploits Active since Oct 2016

CVE-2016-8658 WRITEUP MEDIUM WRITEUP

Linux Kernel < 4.7.5 - Stack-Based Buffer Overflow in brcmf_cfg80211_start_ap via Long SSID

Stack-based buffer overflow in the brcmf_cfg80211_start_ap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.7.5 allows local users to cause a denial of service (system crash) or possibly have unspecified other impact via a long SSID Information Element in a command to a Netlink socket.

CVSS 6.1

View Code

CVE-2017-7541 WRITEUP HIGH WRITEUP

Linux kernel < 4.12.3 - Buffer Overflow via Crafted NL80211_CMD_FRAME Netlink Packet

The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel before 4.12.3 allows local users to cause a denial of service (buffer overflow and system crash) or possibly gain privileges via a crafted NL80211_CMD_FRAME Netlink packet.

CVSS 7.8

View Code