Published: 22/03/2013 Updated: 05/10/2023

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

VMScore: 615

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel prior to 3.8.4 allows physically proximate malicious users to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted cdc-wdm USB device.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
canonical ubuntu linux 12.10
canonical ubuntu linux 10.04
canonical ubuntu linux 12.04

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, information leak or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2012-2121 Benjamin Herrenschmidt and Jason Baron discovered issues with the IOMMU mapping of memory slots us ...

Several security issues were fixed in the kernel ...

CWE-119 https://github.com/torvalds/linux/commit/c0f5ecee4e741667b2493c742b60b6218d40b3aa https://bugzilla.redhat.com/show_bug.cgi?id=921970 http://www.openwall.com/lists/oss-security/2013/03/15/3 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.4 http://www.ubuntu.com/usn/USN-1829-1 http://www.ubuntu.com/usn/USN-1813-1 http://www.ubuntu.com/usn/USN-1812-1 http://www.ubuntu.com/usn/USN-1809-1 http://www.ubuntu.com/usn/USN-1811-1 http://www.ubuntu.com/usn/USN-1814-1 http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 http://rhn.redhat.com/errata/RHSA-2014-0328.html http://rhn.redhat.com/errata/RHSA-2014-0339.html http://www.securityfocus.com/bid/58510 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c0f5ecee4e741667b2493c742b60b6218d40b3aa https://nvd.nist.gov https://www.debian.org/security/./dsa-2668 https://usn.ubuntu.com/1809-1/

CVE-2013-1860

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect