{"id":"CVE-2013-4579","url":"https://www.cyber-defence.io/tools/cve/CVE-2013-4579","generatedAt":"2026-11-05T07:20:23.952Z","title":"The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote…","description":"The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote attackers to discover the original MAC address after spoofing by sending a series of packets to MAC addresses with certain bit manipulations.","published":"2013-11-20T13:19:42.000Z","lastModified":"2026-06-16T23:57:29.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"2.0","score":4.3,"severity":"MEDIUM","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N"},"cwe":["CWE-310"],"affected":["linux/linux kernel"],"epss":{"score":0.10209,"percentile":0.95686,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2013-12-10","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":38826,"kind":"exploit","title":"Linux Kernel 3.0.5 - 'ath9k_htc_set_bssid_mask()' Information Disclosure","url":"https://www.exploit-db.com/exploits/38826","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/38826.py","file":"exploits/linux/remote/38826.py","published":"2013-12-10","added":"2013-12-10","updated":"2015-11-30","author":"Mathy Vanhoef","type":"remote","platform":"linux","port":null,"verified":true,"codes":["CVE-2013-4579","OSVDB-99878"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/63743/info"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 10.2%, higher than 96% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729573","source":"secalert@redhat.com"},{"url":"http://www.mathyvanhoef.com/2013/11/unmasking-spoofed-mac-address.html","tags":["Exploit"],"source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2013/11/15/3","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2113-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2117-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2133-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2134-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2135-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2136-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2138-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2139-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-2141-1","source":"secalert@redhat.com"},{"url":"https://lists.ath9k.org/pipermail/ath9k-devel/2013-November/012215.html","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mathyvanhoef.com/2013/11/unmasking-spoofed-mac-address.html","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2013/11/15/3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2113-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2117-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2133-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2134-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2135-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2136-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2138-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2139-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2141-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.ath9k.org/pipermail/ath9k-devel/2013-November/012215.html","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-4579","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}