Broadcom WiFi Driver Flaws Expose Computers, Phones, IoT to RCE Attacks

Mohammad.Poorya

Bardzo aktywny
Ekspert
Dołączył
19 Wrzesień 2018
Posty
3208
Reakcje/Polubienia
12992
Miasto
On a Bike!
Broadcom WiFi chipset drivers have been found to contain vulnerabilities impacting multiple operating systems and allowing potential attackers to remotely execute arbitrary code and to trigger denial-of-service according to a
Zaloguj lub Zarejestruj się aby zobaczyć!
and a
Zaloguj lub Zarejestruj się aby zobaczyć!
.

Quarkslab's intern Hugues Anguelkov was the one who reported five vulnerabilities he found in the "Broadcom wl driver and the open-source brcmfmac driver for Broadcom WiFi chipsets" while reversing engineering and fuzzing Broadcom WiFi chips firmware.

As he discovered, "The Broadcom wl driver is vulnerable to two heap buffer overflows, and the open-source brcmfmac driver is vulnerable to a frame validation bypass and a heap buffer overflow."

The Common Weakness Enumeration database describes heap buffer overflows in the
Zaloguj lub Zarejestruj się aby zobaczyć!
entry, stating that they can lead to system crashes or the impacted software going into an infinite loop, while also allowing attackers "to execute arbitrary code, which is usually outside the scope of a program's implicit security policy" and bypassing security services.

Zaloguj lub Zarejestruj się aby zobaczyć!
 
Do góry