Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-0913

Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.

Published

2013-03-18T15:55:01.027

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

3.9

Impact Score

10.0

Weaknesses

Type: Primary
CWE-189

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linux	linux_kernel	< 3.0.71	Yes
Operating System	linux	linux_kernel	< 3.2.42	Yes
Operating System	linux	linux_kernel	< 3.4.38	Yes
Operating System	linux	linux_kernel	< 3.8.5	Yes
Operating System	opensuse	opensuse	11.4	Yes
Operating System	opensuse	opensuse	12.1	Yes

References

http://git.chromium.org/gitweb/?p=chromiumos/third_party/kernel.git%3Ba=commit%3Bh=c79efdf2b7f68f985922a8272d64269ecd490477 Third Party Advisory ([email protected])
http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html Third Party Advisory ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html Third Party Advisory, VDB Entry ([email protected])
http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html Third Party Advisory, VDB Entry ([email protected])
http://openwall.com/lists/oss-security/2013/03/11/6 Mailing List ([email protected])
http://openwall.com/lists/oss-security/2013/03/13/9 Mailing List ([email protected])
http://openwall.com/lists/oss-security/2013/03/14/22 Mailing List ([email protected])
http://rhn.redhat.com/errata/RHSA-2013-0744.html Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/USN-1809-1 Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/USN-1811-1 Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/USN-1812-1 Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/USN-1813-1 Third Party Advisory, VDB Entry ([email protected])
http://www.ubuntu.com/usn/USN-1814-1 Third Party Advisory, VDB Entry ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=920471 Issue Tracking ([email protected])
https://code.google.com/p/chromium-os/issues/detail?id=39733 Third Party Advisory ([email protected])
https://gerrit.chromium.org/gerrit/45118 Third Party Advisory ([email protected])
https://lkml.org/lkml/2013/3/11/501 Patch, Third Party Advisory ([email protected])
http://git.chromium.org/gitweb/?p=chromiumos/third_party/kernel.git%3Ba=commit%3Bh=c79efdf2b7f68f985922a8272d64269ecd490477 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://googlechromereleases.blogspot.com/2013/03/stable-channel-update-for-chrome-os_15.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://openwall.com/lists/oss-security/2013/03/11/6 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://openwall.com/lists/oss-security/2013/03/13/9 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://openwall.com/lists/oss-security/2013/03/14/22 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://rhn.redhat.com/errata/RHSA-2013-0744.html Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1809-1 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1811-1 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1812-1 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1813-1 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.ubuntu.com/usn/USN-1814-1 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=920471 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
https://code.google.com/p/chromium-os/issues/detail?id=39733 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://gerrit.chromium.org/gerrit/45118 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lkml.org/lkml/2013/3/11/501 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)