openSUSE Security Update : gpsm (openSUSE-2015-531)

gpsm was updated to fix one security issue. The following vulnerability was fixed : - CVE-2013-2038: Denial of service by a remote attacker via specially crafted packages boo818136 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2013-2038

The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service daemon termination and possibly execute arbitrary code via a GPS packet with a malformed $GPGGA interpreted sentence that lacks certain fields and a terminator. NOTE: a separate issue in the AIS driver was...

CVE-2013-2038

The CVE-2013-2038 entry concerns the NMEA0183 driver in gpsd (pre-3.9). A malformed GPS packet with a defective $GPGGA interpreted sentence (lacking certain fields/terminator) may cause a denial of service (daemon termination) and possibly allow arbitrary code execution. Public references (SUSE, ...

Ubuntu 12.04 LTS : gpsd vulnerability (USN-1820-1)

It was discovered that gpsd incorrectly handled certain malformed GPS data. An attacker could use this issue to cause gpsd to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from...