CVE-2013-3582

Опубликовано: 28 авг. 2013

Источник: nvd

CVSS2: 7.6

EPSS Низкий

Описание

Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.

Ссылки

http://www.kb.cert.org/vuls/id/912156
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-99HSLA
US Government Resource
https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdf
Exploit
https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdf
Exploit
https://www.blackhat.com/us-13/archives.html#Butterworth
http://www.kb.cert.org/vuls/id/912156
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-99HSLA
US Government Resource
https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-Slides.pdf
Exploit
https://media.blackhat.com/us-13/US-13-Butterworth-BIOS-Security-WP.pdf
Exploit
https://www.blackhat.com/us-13/archives.html#Butterworth

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:dell:latitude_d530:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_d531:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_d630:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_d631:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_d830:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_e4200:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_e4300:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_e5400:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_e5500:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_e6400:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_e6400_atg:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_e6400_atg_xfr:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_e6500:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_xt2:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:latitude_z600:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_m2300:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_m2400:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_m4300:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_m4400:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_m6300:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_m6400:-:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_m6500:-:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00843

Низкий

7.6 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-6486-j487-828h

github

больше 3 лет назад