6.8

CVE-2013-1872

The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fs_visitor::remove_dead_constants function.  NOTE: this issue might be related to CVE-2013-0796.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mesa3d ≫ Mesa Version 9.0
Mesa3d ≫ Mesa Version 9.0.1
Mesa3d ≫ Mesa Version 9.0.2
Mesa3d ≫ Mesa Version 9.0.3
Canonical ≫ Ubuntu Linux Version 12.04 Update - Edition lts
Canonical ≫ Ubuntu Linux Version 12.10
Canonical ≫ Ubuntu Linux Version 13.04
Opensuse ≫ Opensuse Version 12.2
Opensuse ≫ Opensuse Version 12.3
Redhat ≫ Enterprise Linux Version 6.0
Mesa3d ≫ Mesa Version 8.0
Mesa3d ≫ Mesa Version 8.0.1
Mesa3d ≫ Mesa Version 8.0.2
Mesa3d ≫ Mesa Version 8.0.3
Mesa3d ≫ Mesa Version 8.0.4
Mesa3d ≫ Mesa Version 8.0.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.61% 0.834
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://advisories.mageia.org/MGASA-2013-0190.html
http://rhn.redhat.com/errata/RHSA-2013-0897.html
http://www.ubuntu.com/usn/USN-1888-1
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00019.html
http://www.debian.org/security/2013/dsa-2704
http://www.securityfocus.com/bid/60285
https://bugs.freedesktop.org/show_bug.cgi?id=59429
https://bugzilla.redhat.com/show_bug.cgi?id=923584