CVE-2017-9417 Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.
CriticalCVSS 9.8
EPSS 66.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firmware-nonfree(Debian:12) | < 20180518-1 | 20180518-1 |
| debian/firmware-nonfree(Debian:12) | = 0.1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.10 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.11 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.12 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.13 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.13~bpo40+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.14 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.14+lenny1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.14+lenny2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.15 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.16 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.16~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.17 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.17~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.18 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.19 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.20 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.21 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.22 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.23 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.23~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.24 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.24~bpo50+1 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firmware-nonfree(Debian:12) | = 0.25 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.26 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.27 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.27~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.28 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.28+squeeze1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.29 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.3 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.30 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.31 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.32 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.32~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.33 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.34 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.35 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.35~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.36 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.36+wheezy.1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.36+wheezy.1~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.37 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.38 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.38~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.39 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.39~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.4 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.4+etchnhalf.1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.40 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.40~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.41 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.41~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.42 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.43 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.43~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.44 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.44~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.4etch1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.5 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.6 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.7 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.8 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 0.9 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151018-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151018-2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151018-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151207-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20151207-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160110-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160110-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160824-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20160824-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-2 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-3 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-3~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-4 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-4~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-5 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20161130-5~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20170823-1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20170823-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:12) | = 20180518-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | < 20180518-1 | 20180518-1 |
| debian/firmware-nonfree(Debian:13) | = 0.1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.10 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.11 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.12 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.13 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.13~bpo40+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.14 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.14+lenny1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.14+lenny2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.15 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.16 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.16~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.17 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.17~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.18 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.19 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.20 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.21 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.22 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.23 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.23~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.24 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.24~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.25 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.26 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.27 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.27~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.28 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.28+squeeze1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.29 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.3 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.30 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.31 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.32 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.32~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.33 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.34 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.35 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.35~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.36 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.36+wheezy.1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.36+wheezy.1~bpo60+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.37 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.38 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.38~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.39 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.39~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.4 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.4+etchnhalf.1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.40 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.40~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.41 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.41~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.42 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.43 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.43~bpo70+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.44 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.44~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.4etch1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.5 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.6 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.7 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.8 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 0.9 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151018-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151018-2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151018-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151207-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20151207-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160110-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160110-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160824-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20160824-1~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-2 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-2~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-3 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-3~bpo8+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-4 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-4~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-5 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20161130-5~deb8u1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20170823-1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20170823-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:13) | = 20180518-1~bpo9+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | < 20180518-1 | 20180518-1 |
| debian/firmware-nonfree(Debian:14) | = 0.1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.10 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.11 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.12 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.13 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.13~bpo40+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.14 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.14+lenny1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.14+lenny2 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.15 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.16 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.16~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.17 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.17~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.18 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.19 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.2 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.20 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.21 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.22 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.23 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.23~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.24 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.24~bpo50+1 | No fix listed |
| debian/firmware-nonfree(Debian:14) | = 0.25 | No fix listed |
References
- Debian Security Tracker CVE-2017-9417 vendor-advisory
- bugs.debian.org issue-tracking
- 20190513 APPLE-SA-2019-5-13-6 Apple TV Software 7.3 mailing-list
- 99482 vdb-entry
- 1038950 vdb-entry
- 1039330 vdb-entry
- [debian-lts-announce] 20181113 [SECURITY] [DLA 1573-1] firmware-nonfree security update mailing-list
- portal.msrc.microsoft.com
- 20190514 APPLE-SA-2019-5-13-6 Apple TV Software 7.3 mailing-list
- source.android.com
- support.apple.com
- www.blackhat.com technical-description third-party-advisory