MGASA-2017-0472

    Dashboard / Vulnerabilities / MGASA-2017-0472

    MGASA-2017-0472

    Published: 28 Dec 2017Last Modified: 16 Apr 2026

    Summary: Updated nonfree firmwares fixes security issues and adds new hw support

    Details: Updated nonfree firmwares fixes at least the following security issues: Broadcom firmware fixes: - dropping BRCM proprietary packets received over the air (CVE-2016-0801) - adding length checks for TDLS action frames (CVE-2017-0561) - adding length checks for WME IE (CVE-2017-9417) Iwlwifi firmware fixes: - The reinstallation of the Group Temporal key could be used for replay attacks (CVE-2017-13080) - The reinstallation of the Integrity Group Temporal key could be used for replay attacks (CVE-2017-13081) This update also adds updated firmwares: * ath10k, cxgb4, liquidio, mrvl, ql2400, ql2500, wilc1000 * Amd Polaris10-12, Intel BXT/SKL/KBL/CNL and new firmwares: * Amd Vega10 and Raven * Cavium nitrox * Intel CNL/GLK, IPU3, JeffersonPeak, ThunderPeak * Mellanox Spectrum * nVidia GP108 (GTX1030) * Qualcom Adreno &Venus, imx SDMA, * Realtek rtl8822be in order to support new hardware supported by 4.14 series kernels.

    References: https://advisories.mageia.org/MGASA-2017-0472.html, https://bugs.mageia.org/show_bug.cgi?id=22100

    Affected packages

    Package

    Name: kernel-firmware-nonfree

    Purl: pkg:rpm/mageia/kernel-firmware-nonfree?arch=source&distro=mageia-6

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -20171220-1.mga6.nonfree

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High