Lucene search
HistorySep 16, 2013 - 1:01 p.m.
CVE-2013-2897
linux kernel
hid subsystem
array index errors
denial of service
heap memory corruption
null pointer dereference
oops
4.7 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.8%
Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device.
Affected configurations
Node
linuxlinux_kernelRange≤3.11
ORlinuxlinux_kernelMatch3.0rc1
ORlinuxlinux_kernelMatch3.0rc2
ORlinuxlinux_kernelMatch3.0rc3
ORlinuxlinux_kernelMatch3.0rc4
ORlinuxlinux_kernelMatch3.0rc5
ORlinuxlinux_kernelMatch3.0rc6
ORlinuxlinux_kernelMatch3.0rc7
ORlinuxlinux_kernelMatch3.0.1
ORlinuxlinux_kernelMatch3.0.2
ORlinuxlinux_kernelMatch3.0.3
ORlinuxlinux_kernelMatch3.0.4
ORlinuxlinux_kernelMatch3.0.5
ORlinuxlinux_kernelMatch3.0.6
ORlinuxlinux_kernelMatch3.0.7
ORlinuxlinux_kernelMatch3.0.8
ORlinuxlinux_kernelMatch3.0.9
ORlinuxlinux_kernelMatch3.0.10
ORlinuxlinux_kernelMatch3.0.11
ORlinuxlinux_kernelMatch3.0.12
ORlinuxlinux_kernelMatch3.0.13
ORlinuxlinux_kernelMatch3.0.14
ORlinuxlinux_kernelMatch3.0.15
ORlinuxlinux_kernelMatch3.0.16
ORlinuxlinux_kernelMatch3.0.17
ORlinuxlinux_kernelMatch3.0.18
ORlinuxlinux_kernelMatch3.0.19
ORlinuxlinux_kernelMatch3.0.20
ORlinuxlinux_kernelMatch3.0.21
ORlinuxlinux_kernelMatch3.0.22
ORlinuxlinux_kernelMatch3.0.23
ORlinuxlinux_kernelMatch3.0.24
ORlinuxlinux_kernelMatch3.0.25
ORlinuxlinux_kernelMatch3.0.26
ORlinuxlinux_kernelMatch3.0.27
ORlinuxlinux_kernelMatch3.0.28
ORlinuxlinux_kernelMatch3.0.29
ORlinuxlinux_kernelMatch3.0.30
ORlinuxlinux_kernelMatch3.0.31
ORlinuxlinux_kernelMatch3.0.32
ORlinuxlinux_kernelMatch3.0.33
ORlinuxlinux_kernelMatch3.0.34
ORlinuxlinux_kernelMatch3.0.35
ORlinuxlinux_kernelMatch3.0.36
ORlinuxlinux_kernelMatch3.0.37
ORlinuxlinux_kernelMatch3.0.38
ORlinuxlinux_kernelMatch3.0.39
ORlinuxlinux_kernelMatch3.0.40
ORlinuxlinux_kernelMatch3.0.41
ORlinuxlinux_kernelMatch3.0.42
ORlinuxlinux_kernelMatch3.0.43
ORlinuxlinux_kernelMatch3.0.44
ORlinuxlinux_kernelMatch3.0.45
ORlinuxlinux_kernelMatch3.0.46
ORlinuxlinux_kernelMatch3.0.47
ORlinuxlinux_kernelMatch3.0.48
ORlinuxlinux_kernelMatch3.0.49
ORlinuxlinux_kernelMatch3.0.50
ORlinuxlinux_kernelMatch3.0.51
ORlinuxlinux_kernelMatch3.0.52
ORlinuxlinux_kernelMatch3.0.53
ORlinuxlinux_kernelMatch3.0.54
ORlinuxlinux_kernelMatch3.0.55
ORlinuxlinux_kernelMatch3.0.56
ORlinuxlinux_kernelMatch3.0.57
ORlinuxlinux_kernelMatch3.0.58
ORlinuxlinux_kernelMatch3.0.59
ORlinuxlinux_kernelMatch3.0.60
ORlinuxlinux_kernelMatch3.0.61
ORlinuxlinux_kernelMatch3.0.62
ORlinuxlinux_kernelMatch3.0.63
ORlinuxlinux_kernelMatch3.0.64
ORlinuxlinux_kernelMatch3.0.65
ORlinuxlinux_kernelMatch3.0.66
ORlinuxlinux_kernelMatch3.0.67
ORlinuxlinux_kernelMatch3.0.68
ORlinuxlinux_kernelMatch3.1
ORlinuxlinux_kernelMatch3.1rc1
ORlinuxlinux_kernelMatch3.1rc2
ORlinuxlinux_kernelMatch3.1rc3
ORlinuxlinux_kernelMatch3.1rc4
ORlinuxlinux_kernelMatch3.1.1
ORlinuxlinux_kernelMatch3.1.2
ORlinuxlinux_kernelMatch3.1.3
ORlinuxlinux_kernelMatch3.1.4
ORlinuxlinux_kernelMatch3.1.5
ORlinuxlinux_kernelMatch3.1.6
ORlinuxlinux_kernelMatch3.1.7
ORlinuxlinux_kernelMatch3.1.8
ORlinuxlinux_kernelMatch3.1.9
ORlinuxlinux_kernelMatch3.1.10
ORlinuxlinux_kernelMatch3.2
ORlinuxlinux_kernelMatch3.2rc2
ORlinuxlinux_kernelMatch3.2rc3
ORlinuxlinux_kernelMatch3.2rc4
ORlinuxlinux_kernelMatch3.2rc5
ORlinuxlinux_kernelMatch3.2rc6
ORlinuxlinux_kernelMatch3.2rc7
ORlinuxlinux_kernelMatch3.2.1
ORlinuxlinux_kernelMatch3.2.2
ORlinuxlinux_kernelMatch3.2.3
ORlinuxlinux_kernelMatch3.2.4
ORlinuxlinux_kernelMatch3.2.5
ORlinuxlinux_kernelMatch3.2.6
ORlinuxlinux_kernelMatch3.2.7
ORlinuxlinux_kernelMatch3.2.8
ORlinuxlinux_kernelMatch3.2.9
ORlinuxlinux_kernelMatch3.2.10
ORlinuxlinux_kernelMatch3.2.11
ORlinuxlinux_kernelMatch3.2.12
ORlinuxlinux_kernelMatch3.2.13
ORlinuxlinux_kernelMatch3.2.14
ORlinuxlinux_kernelMatch3.2.15
ORlinuxlinux_kernelMatch3.2.16
ORlinuxlinux_kernelMatch3.2.17
ORlinuxlinux_kernelMatch3.2.18
ORlinuxlinux_kernelMatch3.2.19
ORlinuxlinux_kernelMatch3.2.20
ORlinuxlinux_kernelMatch3.2.21
ORlinuxlinux_kernelMatch3.2.22
ORlinuxlinux_kernelMatch3.2.23
ORlinuxlinux_kernelMatch3.2.24
ORlinuxlinux_kernelMatch3.2.25
ORlinuxlinux_kernelMatch3.2.26
ORlinuxlinux_kernelMatch3.2.27
ORlinuxlinux_kernelMatch3.2.28
ORlinuxlinux_kernelMatch3.2.29
ORlinuxlinux_kernelMatch3.2.30
ORlinuxlinux_kernelMatch3.3
ORlinuxlinux_kernelMatch3.3rc1
ORlinuxlinux_kernelMatch3.3rc2
ORlinuxlinux_kernelMatch3.3rc3
ORlinuxlinux_kernelMatch3.3rc4
ORlinuxlinux_kernelMatch3.3rc5
ORlinuxlinux_kernelMatch3.3rc6
ORlinuxlinux_kernelMatch3.3rc7
ORlinuxlinux_kernelMatch3.3.1
ORlinuxlinux_kernelMatch3.3.2
ORlinuxlinux_kernelMatch3.3.3
ORlinuxlinux_kernelMatch3.3.4
ORlinuxlinux_kernelMatch3.3.5
ORlinuxlinux_kernelMatch3.3.6
ORlinuxlinux_kernelMatch3.3.7
ORlinuxlinux_kernelMatch3.3.8
ORlinuxlinux_kernelMatch3.4
ORlinuxlinux_kernelMatch3.4rc1
ORlinuxlinux_kernelMatch3.4rc2
ORlinuxlinux_kernelMatch3.4rc3
ORlinuxlinux_kernelMatch3.4rc4
ORlinuxlinux_kernelMatch3.4rc5
ORlinuxlinux_kernelMatch3.4rc6
ORlinuxlinux_kernelMatch3.4rc7
ORlinuxlinux_kernelMatch3.4.1
ORlinuxlinux_kernelMatch3.4.2
ORlinuxlinux_kernelMatch3.4.3
ORlinuxlinux_kernelMatch3.4.4
ORlinuxlinux_kernelMatch3.4.5
ORlinuxlinux_kernelMatch3.4.6
ORlinuxlinux_kernelMatch3.4.7
ORlinuxlinux_kernelMatch3.4.8
ORlinuxlinux_kernelMatch3.4.9
ORlinuxlinux_kernelMatch3.4.10
ORlinuxlinux_kernelMatch3.4.11
ORlinuxlinux_kernelMatch3.4.12
ORlinuxlinux_kernelMatch3.4.13
ORlinuxlinux_kernelMatch3.4.14
ORlinuxlinux_kernelMatch3.4.15
ORlinuxlinux_kernelMatch3.4.16
ORlinuxlinux_kernelMatch3.4.17
ORlinuxlinux_kernelMatch3.4.18
ORlinuxlinux_kernelMatch3.4.19
ORlinuxlinux_kernelMatch3.4.20
ORlinuxlinux_kernelMatch3.4.21
ORlinuxlinux_kernelMatch3.4.22
ORlinuxlinux_kernelMatch3.4.23
ORlinuxlinux_kernelMatch3.4.24
ORlinuxlinux_kernelMatch3.4.25
ORlinuxlinux_kernelMatch3.4.26
ORlinuxlinux_kernelMatch3.4.27
ORlinuxlinux_kernelMatch3.4.28
ORlinuxlinux_kernelMatch3.4.29
ORlinuxlinux_kernelMatch3.4.30
ORlinuxlinux_kernelMatch3.4.31
ORlinuxlinux_kernelMatch3.4.32
ORlinuxlinux_kernelMatch3.5.1
ORlinuxlinux_kernelMatch3.5.2
ORlinuxlinux_kernelMatch3.5.3
ORlinuxlinux_kernelMatch3.5.4
ORlinuxlinux_kernelMatch3.5.5
ORlinuxlinux_kernelMatch3.5.6
ORlinuxlinux_kernelMatch3.5.7
ORlinuxlinux_kernelMatch3.6
ORlinuxlinux_kernelMatch3.6.1
ORlinuxlinux_kernelMatch3.6.2
ORlinuxlinux_kernelMatch3.6.3
ORlinuxlinux_kernelMatch3.6.4
ORlinuxlinux_kernelMatch3.6.5
ORlinuxlinux_kernelMatch3.6.6
ORlinuxlinux_kernelMatch3.6.7
ORlinuxlinux_kernelMatch3.6.8
ORlinuxlinux_kernelMatch3.6.9
ORlinuxlinux_kernelMatch3.6.10
ORlinuxlinux_kernelMatch3.6.11
ORlinuxlinux_kernelMatch3.7
ORlinuxlinux_kernelMatch3.7.1
ORlinuxlinux_kernelMatch3.7.2
ORlinuxlinux_kernelMatch3.7.3
ORlinuxlinux_kernelMatch3.7.4
ORlinuxlinux_kernelMatch3.7.5
ORlinuxlinux_kernelMatch3.7.6
ORlinuxlinux_kernelMatch3.7.7
ORlinuxlinux_kernelMatch3.7.8
ORlinuxlinux_kernelMatch3.7.9
ORlinuxlinux_kernelMatch3.7.10
ORlinuxlinux_kernelMatch3.8.0
ORlinuxlinux_kernelMatch3.8.1
ORlinuxlinux_kernelMatch3.8.2
ORlinuxlinux_kernelMatch3.8.3
ORlinuxlinux_kernelMatch3.8.4
ORlinuxlinux_kernelMatch3.8.5
ORlinuxlinux_kernelMatch3.8.6
ORlinuxlinux_kernelMatch3.8.7
ORlinuxlinux_kernelMatch3.8.8
ORlinuxlinux_kernelMatch3.8.9
ORlinuxlinux_kernelMatch3.8.10
ORlinuxlinux_kernelMatch3.8.11
ORlinuxlinux_kernelMatch3.8.12
ORlinuxlinux_kernelMatch3.8.13
ORlinuxlinux_kernelMatch3.9rc1
ORlinuxlinux_kernelMatch3.9rc2
ORlinuxlinux_kernelMatch3.9rc3
ORlinuxlinux_kernelMatch3.9rc4
ORlinuxlinux_kernelMatch3.9rc5
ORlinuxlinux_kernelMatch3.9rc6
ORlinuxlinux_kernelMatch3.9rc7
ORlinuxlinux_kernelMatch3.9.0
ORlinuxlinux_kernelMatch3.9.1
ORlinuxlinux_kernelMatch3.9.2
ORlinuxlinux_kernelMatch3.9.3
ORlinuxlinux_kernelMatch3.9.4
ORlinuxlinux_kernelMatch3.9.5
ORlinuxlinux_kernelMatch3.9.6
ORlinuxlinux_kernelMatch3.9.7
ORlinuxlinux_kernelMatch3.9.8
ORlinuxlinux_kernelMatch3.9.9
ORlinuxlinux_kernelMatch3.9.10
ORlinuxlinux_kernelMatch3.9.11
ORlinuxlinux_kernelMatch3.10.1
ORlinuxlinux_kernelMatch3.10.2
ORlinuxlinux_kernelMatch3.10.3
ORlinuxlinux_kernelMatch3.10.4
ORlinuxlinux_kernelMatch3.10.5
ORlinuxlinux_kernelMatch3.10.6
ORlinuxlinux_kernelMatch3.10.7
ORlinuxlinux_kernelMatch3.10.8
ORlinuxlinux_kernelMatch3.10.9
ORlinuxlinux_kernelMatch3.10.10
ORlinuxlinux_kernelMatch3.10.11
ORlinuxlinux_kernelMatch3.10.12
References
lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
marc.info/?l=linux-input&m=137772190214635&w=1
openwall.com/lists/oss-security/2013/08/28/13
www.securityfocus.com/bid/62044
www.ubuntu.com/usn/USN-2015-1
www.ubuntu.com/usn/USN-2016-1
www.ubuntu.com/usn/USN-2019-1
www.ubuntu.com/usn/USN-2020-1
www.ubuntu.com/usn/USN-2021-1
www.ubuntu.com/usn/USN-2022-1
www.ubuntu.com/usn/USN-2023-1
www.ubuntu.com/usn/USN-2024-1
www.ubuntu.com/usn/USN-2038-1
www.ubuntu.com/usn/USN-2039-1
www.ubuntu.com/usn/USN-2050-1
www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.54
Related
cvelist
cvelist
CVE-2013-2897
2013-09-13 18:00:00
prion
prion
Null pointer dereference
2013-09-16 13:01:00
nvd
nvd
CVE-2013-2897
2013-09-16 13:01:44
debiancve
debiancve
CVE-2013-2897
2013-09-16 13:01:44
ubuntucve
ubuntucve
CVE-2013-2897
2013-09-16 00:00:00
nessus
nessus
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2016-1)
2013-11-09 00:00:00
Ubuntu 10.04 LTS : linux vulnerabilities (USN-2015-1)
2013-11-09 00:00:00
Ubuntu 13.04 : linux vulnerabilities (USN-2023-1)
2013-11-09 00:00:00
openvas
openvas
Ubuntu Update for linux USN-2015-1
2013-11-18 00:00:00
Ubuntu: Security Advisory (USN-2015-1)
2013-11-18 00:00:00
Ubuntu: Security Advisory (USN-2016-1)
2013-11-18 00:00:00
securityvulns
securityvulns
[USN-2015-1] Linux kernel vulnerabilities
2013-11-13 00:00:00
Linux kernel security vulnerabilities
2013-11-26 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2013-11-08 00:00:00
Linux kernel (EC2) vulnerabilities
2013-11-08 00:00:00
Linux kernel vulnerabilities
2013-11-08 00:00:00
mageia
mageia
Updated kernel-linus package fixes security vulnerabilites.
2013-11-22 23:00:03
Updated kernel-tmb package fixes security vulnerabilites.
2013-11-22 23:01:19
Updated kernel-vserver package fixes security vulnerabilites.
2013-11-22 23:06:50
fedora
fedora
[SECURITY] Fedora 19 Update: kernel-3.10.11-200.fc19
2013-09-13 01:05:37
[SECURITY] Fedora 19 Update: kernel-3.11.1-200.fc19
2013-09-19 02:05:03
[SECURITY] Fedora 19 Update: kernel-3.11.4-201.fc19
2013-10-14 07:12:01
suse
suse
Security update for Linux kernel (important)
2014-12-23 19:06:22
Security update for Linux kernel (important)
2014-12-24 08:08:49
Security update for Linux kernel (important)
2014-12-23 20:05:05
oraclelinux
oraclelinux
4.7 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
59.8%
Related for CVE-2013-2897