6.9

CVE-2013-1860

Exploit
Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted cdc-wdm USB device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 3.0.70
Linux ≫ Linux Kernel Version >= 3.1 < 3.2.41
Linux ≫ Linux Kernel Version >= 3.3 < 3.4.37
Linux ≫ Linux Kernel Version >= 3.5 < 3.8.4
Canonical ≫ Ubuntu Linux Version10.04 SwEdition-
Canonical ≫ Ubuntu Linux Version12.04 SwEdition-
Canonical ≫ Ubuntu Linux Version12.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.82% 0.524
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.mandriva.com/security/advisories?name=MDVSA-2013:176
Broken Link
http://www.ubuntu.com/usn/USN-1809-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-1811-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-1812-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-1813-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-1814-1
Third Party Advisory
http://www.ubuntu.com/usn/USN-1829-1
Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4
Vendor Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c0f5ecee4e741667b2493c742b60b6218d40b3aa
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2014-0328.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0339.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/03/15/3
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/58510
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=921970
Third Party Advisory
Issue Tracking
https://github.com/torvalds/linux/commit/c0f5ecee4e741667b2493c742b60b6218d40b3aa
Patch
Vendor Advisory
Exploit