Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-1872
HistoryMay 30, 2013 - 12:00 a.m.

CVE-2013-1872

2013-05-3000:00:00
ubuntu.com
ubuntu.com
13

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.6%

The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers
to cause a denial of service (reachable assertion and crash) and possibly
execute arbitrary code via vectors involving 3d graphics that trigger an
out-of-bounds array access, related to the
fs_visitor::remove_dead_constants function. NOTE: this issue might be
related to CVE-2013-0796.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchmesa< 8.0.4-0ubuntu0.6UNKNOWN
ubuntu12.10noarchmesa< 9.0.3-0ubuntu0.2UNKNOWN
ubuntu13.04noarchmesa< 9.1.3-0ubuntu0.3UNKNOWN

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.6%