CVE-2013-3582 Memory corruption in n/a
Local administrators can bypass BIOS signing requirements to install arbitrary firmware images via a buffer overflow in Dell BIOS.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-3582?
CVE-2013-3582 is a high-severity memory corruption vulnerability in n/a, published on 28 Aug 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass intended BIOS signing requirements and install arbitrary BIOS images by leveraging administrative privileges and providing a crafted rbu_packet.pktNum value in conjunction with a crafted rbu_packet.pktSize value.
Weakness: CWE-119
Which versions are affected by CVE-2013-3582?
It affects 22 products.
Products include Dell Latitude D530, Dell Latitude D531, Dell Latitude D630, Dell Latitude D631, Dell Latitude D830, Dell Latitude E4200 and 16 more.
How do I fix CVE-2013-3582?
No fix has been published for CVE-2013-3582 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2013-3582 being exploited?
There is no known exploitation of CVE-2013-3582 in the wild and no public exploit code.
Sources
Also known as GHSA-6486-j487-828h.