gpsd vulnerability

2013-05-0800:00:00

ubuntu.com

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.5

Confidence

Low

EPSS

0.032

Percentile

91.2%

JSON

Releases

Ubuntu 12.04

Packages

gpsd - Global Positioning System - daemon

Details

It was discovered that gpsd incorrectly handled certain malformed GPS data.
An attacker could use this issue to cause gpsd to crash, resulting in a
denial of service, or possibly execute arbitrary code.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchgpsd< 3.4-2ubuntu0.1UNKNOWN
Ubuntu12.04noarchgpsd-clients< 3.4-2ubuntu0.1UNKNOWN
Ubuntu12.04noarchgpsd-dbg< 3.4-2ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibgps-dev< 3.4-2ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibgps20< 3.4-2ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibqgpsmm-dev< 3.4-2ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibqgpsmm20< 3.4-2ubuntu0.1UNKNOWN
Ubuntu12.04noarchpython-gps< 3.4-2ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.04	noarch	gpsd	< 3.4-2ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	gpsd-clients	< 3.4-2ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	gpsd-dbg	< 3.4-2ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	libgps-dev	< 3.4-2ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	libgps20	< 3.4-2ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	libqgpsmm-dev	< 3.4-2ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	libqgpsmm20	< 3.4-2ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	python-gps	< 3.4-2ubuntu0.1	UNKNOWN