Evil-DB LogoEvil-DB
← All CVEs

CVE-2013-4579

medium · 4.3

The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote attackers to discover the original MAC address after spoofing by sending a series of packets to MAC addresses with certain bit manipulations.

4.3
CVSS
10.2%
EPSS (exploit prob.)
95th
EPSS percentile
2013-11-20
Published

AV:N/AC:M/Au:N/C:P/I:N/A:N

Weaknesses

CWE-310

Affected products

VendorProductAffected versions
linuxlinux_kernel<= 3.12
linuxlinux_kernel3.0
linuxlinux_kernel3.0
linuxlinux_kernel3.0
linuxlinux_kernel3.0
linuxlinux_kernel3.0
linuxlinux_kernel3.0
linuxlinux_kernel3.0
linuxlinux_kernel3.0.1
linuxlinux_kernel3.0.2
linuxlinux_kernel3.0.3
linuxlinux_kernel3.0.4
linuxlinux_kernel3.0.5
linuxlinux_kernel3.0.6
linuxlinux_kernel3.0.7
linuxlinux_kernel3.0.8
linuxlinux_kernel3.0.9
linuxlinux_kernel3.0.10
linuxlinux_kernel3.0.11
linuxlinux_kernel3.0.12
linuxlinux_kernel3.0.13
linuxlinux_kernel3.0.14
linuxlinux_kernel3.0.15
linuxlinux_kernel3.0.16
linuxlinux_kernel3.0.17
linuxlinux_kernel3.0.18
linuxlinux_kernel3.0.19
linuxlinux_kernel3.0.20
linuxlinux_kernel3.0.21
linuxlinux_kernel3.0.22
linuxlinux_kernel3.0.23
linuxlinux_kernel3.0.24
linuxlinux_kernel3.0.25
linuxlinux_kernel3.0.26
linuxlinux_kernel3.0.27
linuxlinux_kernel3.0.28
linuxlinux_kernel3.0.29
linuxlinux_kernel3.0.30
linuxlinux_kernel3.0.31
linuxlinux_kernel3.0.32

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-4579