Unscored severity · published Feb 6, 2014
CVE-2013-2038
The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitrary code via a GPS packet with a…
–
CVSS
4.2%
EPSS
No
On KEV
Description
The NMEA0183 driver in gpsd before 3.9 allows remote attackers to cause a denial of service (daemon termination) and possibly execute arbitrary code via a GPS packet with a malformed $GPGGA interpreted sentence that lacks certain fields and a terminator. NOTE: a separate issue in the AIS driver was also reported, but it might not be a vulnerability.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GP
Gpsd · Gpsd Project
through 3.8; 3.0; 3.1; 3.2; 3.3; 3.4; +3 more · source: NVD
UL
Ubuntu Linux · Canonical
12.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2038
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2038
Exploit
http://git.savannah.gnu.org/cgit/gpsd.git/commit/?id=dd9c3c2830cb8f8fd8491ce68c82698dc5538f50
lists.nongnu.org
http://lists.nongnu.org/archive/html/gpsd-dev/2013-05/msg00000.html
openwall.com
http://openwall.com/lists/oss-security/2013/05/02/20
openwall.com
http://openwall.com/lists/oss-security/2013/05/08/1
ubuntu.com
http://ubuntu.com/usn/usn-1820-1
www.osvdb.org
http://www.osvdb.org/93000
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation