CVE-2017-9417
Critical · 9.8CVSS
9.8
EPSS
64.0%
Published
Jun 4, 2017
CISA due date
—
The record
Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | firmware-nonfree | 0 | 20180518-1 |
| Debian:12 | firmware-nonfree | 0 | 20180518-1 |
| Debian:13 | firmware-nonfree | 0 | 20180518-1 |
| Debian:14 | firmware-nonfree | 0 | 20180518-1 |
| Debian:8 | firmware-nonfree | 0 | 20161130-4~deb8u1 |
| Mageia:6 | kernel-firmware-nonfree | 0 | 20171220-1.mga6.nonfree |
| Mageia:6 | radeon-firmware | 0 | 20171205-1.mga6.nonfree |
Related vulnerabilities
- CVE-2023-47210 Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux… Also affects firmware-nonfree
- CVE-2023-38417 Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version… Also affects firmware-nonfree
- CVE-2023-35061 Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi… Also affects firmware-nonfree
- CVE-2023-4969 A GPU kernel can read sensitive data from another GPU kernel (even from another user or… Also affects firmware-nonfree
- CVE-2022-40964 Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi… Also affects firmware-nonfree
- CVE-2022-38076 Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi… Also affects firmware-nonfree
- CVE-2022-36351 Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi… Also affects firmware-nonfree
- CVE-2022-27635 Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi… Also affects firmware-nonfree