CVE-2013-2038
06.02.2014, 17:00
The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitrary code via a GPS packet with a malformed $GPGGA interpreted sentence that lacks certain fields and a terminator. NOTE: a separate issue in the AIS driver was also reported, but it might not be a vulnerability.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gpsd_project | gpsd | 𝑥 ≤ 3.8 |
| gpsd_project | gpsd | 3.0 |
| gpsd_project | gpsd | 3.1 |
| gpsd_project | gpsd | 3.2 |
| gpsd_project | gpsd | 3.3 |
| gpsd_project | gpsd | 3.4 |
| gpsd_project | gpsd | 3.5 |
| gpsd_project | gpsd | 3.6 |
| gpsd_project | gpsd | 3.7 |
| canonical | ubuntu_linux | 12.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References