csaf_redhat - rhsa-2013

rhsa-2013_1490

Vulnerability from csaf_redhat

Published

2013-10-31 16:21

Modified

2024-11-05 18:13

Summary

Red Hat Security Advisory: kernel-rt security and bug fix update

Notes

Topic

Updated kernel-rt packages that fix multiple security issues and one bug are now available for Red Hat Enterprise MRG 2.4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. * A flaw was found in the way IP packets with an Internet Header Length (ihl) of zero were processed in the skb_flow_dissect() function in the Linux kernel. A remote attacker could use this flaw to trigger an infinite loop in the kernel, leading to a denial of service. (CVE-2013-4348, Important) * A flaw was found in the way the Linux kernel's IPv6 implementation handled certain UDP packets when the UDP Fragmentation Offload (UFO) feature was enabled. A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2013-4387, Important) * A flaw was found in the way the Linux kernel handled the creation of temporary IPv6 addresses. If the IPv6 privacy extension was enabled (/proc/sys/net/ipv6/conf/eth0/use_tempaddr set to '2'), an attacker on the local network could disable IPv6 temporary address generation, leading to a potential information disclosure. (CVE-2013-0343, Moderate) * A flaw was found in the way the Linux kernel handled HID (Human Interface Device) reports with an out-of-bounds Report ID. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2013-2888, Moderate) * Heap-based buffer overflow flaws were found in the way the Pantherlord/GreenAsia game controller driver, the Logitech force feedback drivers, and the Logitech Unifying receivers driver handled HID reports. An attacker with physical access to the system could use these flaws to crash the system or, potentially, escalate their privileges on the system. (CVE-2013-2892, CVE-2013-2893, CVE-2013-2895, Moderate) * A NULL pointer dereference flaw was found in the way the N-Trig touch screen driver handled HID reports. An attacker with physical access to the system could use this flaw to crash the system, resulting in a denial of service. (CVE-2013-2896, Moderate) * An information leak flaw was found in the way the Linux kernel's device mapper subsystem, under certain conditions, interpreted data written to snapshot block devices. An attacker could use this flaw to read data from disk blocks in free space, which are normally inaccessible. (CVE-2013-4299, Moderate) * A use-after-free flaw was found in the tun_set_iff() function in the Universal TUN/TAP device driver implementation in the Linux kernel. A privileged user could use this flaw to crash the system or, potentially, further escalate their privileges on the system. (CVE-2013-4343, Moderate) * An off-by-one flaw was found in the way the ANSI CPRNG implementation in the Linux kernel processed non-block size aligned requests. This could lead to random numbers being generated with less bits of entropy than expected when ANSI CPRNG was used. (CVE-2013-4345, Moderate) * A flaw was found in the way the Linux kernel's IPv6 SCTP implementation interacted with the IPsec subsystem. This resulted in unencrypted SCTP packets being sent over the network even though IPsec encryption was enabled. An attacker able to inspect these SCTP packets could use this flaw to obtain potentially sensitive information. (CVE-2013-4350, Moderate) Red Hat would like to thank Fujitsu for reporting CVE-2013-4299 and Stephan Mueller for reporting CVE-2013-4345. The CVE-2013-4348 issue was discovered by Jason Wang of Red Hat. Bug fix: * RoCE appeared to be supported in the MRG Realtime kernel even when the required user space packages from the HPN channel were not installed. The Realtime kernel now checks for the HPN channel packages before exposing the RoCE interfaces. RoCE devices appear as plain 10GigE devices if the needed HPN channel user space packages are not installed. (BZ#1012993) Users should upgrade to these updated packages, which upgrade the kernel-rt kernel to version kernel-rt-3.8.13-rt14, and correct these issues. The system must be rebooted for this update to take effect.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated kernel-rt packages that fix multiple security issues and one bug\nare now available for Red Hat Enterprise MRG 2.4.\n\nThe Red Hat Security Response Team has rated this update as having\nimportant security impact. Common Vulnerability Scoring System (CVSS) base\nscores, which give detailed severity ratings, are available for each\nvulnerability from the CVE links in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The kernel-rt packages contain the Linux kernel, the core of any Linux\noperating system.\n\n* A flaw was found in the way IP packets with an Internet Header Length\n(ihl) of zero were processed in the skb_flow_dissect() function in the\nLinux kernel. A remote attacker could use this flaw to trigger an infinite\nloop in the kernel, leading to a denial of service. (CVE-2013-4348,\nImportant)\n\n* A flaw was found in the way the Linux kernel\u0027s IPv6 implementation\nhandled certain UDP packets when the UDP Fragmentation Offload (UFO)\nfeature was enabled. A remote attacker could use this flaw to crash the\nsystem or, potentially, escalate their privileges on the system.\n(CVE-2013-4387, Important)\n\n* A flaw was found in the way the Linux kernel handled the creation of\ntemporary IPv6 addresses. If the IPv6 privacy extension was enabled\n(/proc/sys/net/ipv6/conf/eth0/use_tempaddr set to \u00272\u0027), an attacker on\nthe local network could disable IPv6 temporary address generation, leading\nto a potential information disclosure. (CVE-2013-0343, Moderate)\n\n* A flaw was found in the way the Linux kernel handled HID (Human Interface\nDevice) reports with an out-of-bounds Report ID. An attacker with physical\naccess to the system could use this flaw to crash the system or,\npotentially, escalate their privileges on the system. (CVE-2013-2888,\nModerate)\n\n* Heap-based buffer overflow flaws were found in the way the\nPantherlord/GreenAsia game controller driver, the Logitech force feedback\ndrivers, and the Logitech Unifying receivers driver handled HID reports.\nAn attacker with physical access to the system could use these flaws to\ncrash the system or, potentially, escalate their privileges on the system.\n(CVE-2013-2892, CVE-2013-2893, CVE-2013-2895, Moderate)\n\n* A NULL pointer dereference flaw was found in the way the N-Trig touch\nscreen driver handled HID reports. An attacker with physical access to the\nsystem could use this flaw to crash the system, resulting in a denial of\nservice. (CVE-2013-2896, Moderate)\n\n* An information leak flaw was found in the way the Linux kernel\u0027s device\nmapper subsystem, under certain conditions, interpreted data written to\nsnapshot block devices. An attacker could use this flaw to read data from\ndisk blocks in free space, which are normally inaccessible. (CVE-2013-4299,\nModerate)\n\n* A use-after-free flaw was found in the tun_set_iff() function in the\nUniversal TUN/TAP device driver implementation in the Linux kernel.\nA privileged user could use this flaw to crash the system or, potentially,\nfurther escalate their privileges on the system. (CVE-2013-4343, Moderate)\n\n* An off-by-one flaw was found in the way the ANSI CPRNG implementation in\nthe Linux kernel processed non-block size aligned requests. This could lead\nto random numbers being generated with less bits of entropy than expected\nwhen ANSI CPRNG was used. (CVE-2013-4345, Moderate)\n\n* A flaw was found in the way the Linux kernel\u0027s IPv6 SCTP implementation\ninteracted with the IPsec subsystem. This resulted in unencrypted SCTP\npackets being sent over the network even though IPsec encryption was\nenabled. An attacker able to inspect these SCTP packets could use this flaw\nto obtain potentially sensitive information. (CVE-2013-4350, Moderate)\n\nRed Hat would like to thank Fujitsu for reporting CVE-2013-4299 and Stephan\nMueller for reporting CVE-2013-4345. The CVE-2013-4348 issue was discovered\nby Jason Wang of Red Hat.\n\nBug fix:\n\n* RoCE appeared to be supported in the MRG Realtime kernel even when the\nrequired user space packages from the HPN channel were not installed.\nThe Realtime kernel now checks for the HPN channel packages before exposing\nthe RoCE interfaces. RoCE devices appear as plain 10GigE devices if the\nneeded HPN channel user space packages are not installed. (BZ#1012993)\n\nUsers should upgrade to these updated packages, which upgrade the kernel-rt\nkernel to version kernel-rt-3.8.13-rt14, and correct these issues.\nThe system must be rebooted for this update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2013:1490",
        "url": "https://access.redhat.com/errata/RHSA-2013:1490"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "914664",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=914664"
      },
      {
        "category": "external",
        "summary": "1000360",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1000360"
      },
      {
        "category": "external",
        "summary": "1000414",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1000414"
      },
      {
        "category": "external",
        "summary": "1000429",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1000429"
      },
      {
        "category": "external",
        "summary": "1000451",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1000451"
      },
      {
        "category": "external",
        "summary": "1000494",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1000494"
      },
      {
        "category": "external",
        "summary": "1004233",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1004233"
      },
      {
        "category": "external",
        "summary": "1007690",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007690"
      },
      {
        "category": "external",
        "summary": "1007733",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007733"
      },
      {
        "category": "external",
        "summary": "1007872",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007872"
      },
      {
        "category": "external",
        "summary": "1007939",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007939"
      },
      {
        "category": "external",
        "summary": "1011927",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1011927"
      },
      {
        "category": "external",
        "summary": "1012993",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1012993"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1490.json"
      }
    ],
    "title": "Red Hat Security Advisory: kernel-rt security and bug fix update",
    "tracking": {
      "current_release_date": "2024-11-05T18:13:54+00:00",
      "generator": {
        "date": "2024-11-05T18:13:54+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2013:1490",
      "initial_release_date": "2013-10-31T16:21:00+00:00",
      "revision_history": [
        {
          "date": "2013-10-31T16:21:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2013-10-31T16:23:39+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T18:13:54+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat MRG Realtime for RHEL 6 Server v.2",
                "product": {
                  "name": "Red Hat MRG Realtime for RHEL 6 Server v.2",
                  "product_id": "6Server-MRG-Realtime-2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_mrg:2:server:el6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise MRG for RHEL-6"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-vanilla@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-debuginfo@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-vanilla-devel@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-debuginfo@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-vanilla-debuginfo@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo-common-x86_64@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debuginfo@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-debug-devel@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-trace-devel@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                "product": {
                  "name": "kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_id": "kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-devel@3.8.13-rt14.25.el6rt?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-0:3.8.13-rt14.25.el6rt.src",
                "product": {
                  "name": "kernel-rt-0:3.8.13-rt14.25.el6rt.src",
                  "product_id": "kernel-rt-0:3.8.13-rt14.25.el6rt.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt@3.8.13-rt14.25.el6rt?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
                "product": {
                  "name": "kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
                  "product_id": "kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-firmware@3.8.13-rt14.25.el6rt?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
                "product": {
                  "name": "kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
                  "product_id": "kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/kernel-rt-doc@3.8.13-rt14.25.el6rt?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch",
                "product": {
                  "name": "mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch",
                  "product_id": "mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mrg-rt-release@3.8.13-rt14.25.el6rt?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.8.13-rt14.25.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src"
        },
        "product_reference": "kernel-rt-0:3.8.13-rt14.25.el6rt.src",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch"
        },
        "product_reference": "kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch"
        },
        "product_reference": "kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64"
        },
        "product_reference": "kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2",
          "product_id": "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        },
        "product_reference": "mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch",
        "relates_to_product_reference": "6Server-MRG-Realtime-2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-0343",
      "discovery_date": "2012-11-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "914664"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: handling of IPv6 temporary addresses",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-0343"
        },
        {
          "category": "external",
          "summary": "RHBZ#914664",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=914664"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-0343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0343"
        }
      ],
      "release_date": "2012-11-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 3.2,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:H/Au:N/C:P/I:N/A:P",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: handling of IPv6 temporary addresses"
    },
    {
      "cve": "CVE-2013-2888",
      "discovery_date": "2013-08-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1000451"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: HID: memory corruption flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.\n\nNote: user would need physical access to the system to exploit this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2888"
        },
        {
          "category": "external",
          "summary": "RHBZ#1000451",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1000451"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2888",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2888"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2888",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2888"
        }
      ],
      "release_date": "2013-08-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: HID: memory corruption flaw"
    },
    {
      "cve": "CVE-2013-2892",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2013-08-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1000429"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: HID: pantherlord: heap overflow flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.\n\nThis issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2 may address this issue.\n\nNote: user would need physical access to the system to exploit this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2892"
        },
        {
          "category": "external",
          "summary": "RHBZ#1000429",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1000429"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2892",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2892"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2892",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2892"
        }
      ],
      "release_date": "2013-08-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: HID: pantherlord: heap overflow flaw"
    },
    {
      "cve": "CVE-2013-2893",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2013-08-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1000414"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: HID: LG: heap overflow flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.\n\nThis issue affects the version of the kernel package as shipped with Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise MRG 2 may address this issue.\n\nNote: user would need physical access to the system to exploit this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2893"
        },
        {
          "category": "external",
          "summary": "RHBZ#1000414",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1000414"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2893",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2893"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2893",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2893"
        }
      ],
      "release_date": "2013-08-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: HID: LG: heap overflow flaw"
    },
    {
      "cve": "CVE-2013-2895",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2013-08-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1000360"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: HID: logitech-dj: heap overflow flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.\n\nThis issue affects the version of the kernel package as shipped with Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise MRG 2 may address this issue.\n\nNote: user would need physical access to the system to exploit this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2895"
        },
        {
          "category": "external",
          "summary": "RHBZ#1000360",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1000360"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2895",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2895"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2895",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2895"
        }
      ],
      "release_date": "2013-08-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: HID: logitech-dj: heap overflow flaw"
    },
    {
      "cve": "CVE-2013-2896",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2013-08-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1000494"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: HID: ntrig: NULL pointer dereference",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5 and Red Hat Enterprise Linux 6.\n\nThis issue affects the version of the kernel package as shipped with Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise MRG 2 may address this issue.\n\nNote: user would need physical access to the system to exploit this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-2896"
        },
        {
          "category": "external",
          "summary": "RHBZ#1000494",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1000494"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-2896",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-2896"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-2896",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-2896"
        }
      ],
      "release_date": "2013-08-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 4.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:L/AC:H/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: HID: ntrig: NULL pointer dereference"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Fujitsu"
          ]
        }
      ],
      "cve": "CVE-2013-4299",
      "discovery_date": "2013-08-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1004233"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: dm: dm-snapshot data leak",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-4299"
        },
        {
          "category": "external",
          "summary": "RHBZ#1004233",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1004233"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4299",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-4299"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4299",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4299"
        }
      ],
      "release_date": "2013-10-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:H/Au:S/C:C/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: dm: dm-snapshot data leak"
    },
    {
      "cve": "CVE-2013-4343",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2013-09-12T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1007733"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: net: use-after-free TUNSETIFF",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-4343"
        },
        {
          "category": "external",
          "summary": "RHBZ#1007733",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007733"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4343",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-4343"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4343",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4343"
        }
      ],
      "release_date": "2013-09-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "SINGLE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.8,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Kernel: net: use-after-free TUNSETIFF"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Stephan Mueller"
          ]
        }
      ],
      "cve": "CVE-2013-4345",
      "cwe": {
        "id": "CWE-193",
        "name": "Off-by-one Error"
      },
      "discovery_date": "2013-09-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1007690"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: ansi_cprng: off by one error in non-block size request",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 5, 6 and Red Hat Enterprise MRG 2 may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-4345"
        },
        {
          "category": "external",
          "summary": "RHBZ#1007690",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007690"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4345",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-4345"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4345",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4345"
        }
      ],
      "release_date": "2013-09-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 2.6,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: ansi_cprng: off by one error in non-block size request"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Jason Wang"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2013-4348",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "discovery_date": "2013-09-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1007939"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: deadloop path in skb_flow_dissect()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect Linux kernel packages as shipped with Red Hat Enterprise Linux 5 and 6. Future Linux kernel updates for Red Hat Enterprise Linux MRG 2 might address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-4348"
        },
        {
          "category": "external",
          "summary": "RHBZ#1007939",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007939"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4348",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-4348"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4348",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4348"
        }
      ],
      "release_date": "2013-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "kernel: net: deadloop path in skb_flow_dissect()"
    },
    {
      "cve": "CVE-2013-4350",
      "discovery_date": "2013-09-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1007872"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "kernel: net: sctp: ipv6 ipsec encryption bug in sctp_v6_xmit",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The risks associated with fixing this bug in Red Hat Enterprise Linux 5 and 6 are greater than its security impact. This issue is not currently planned to be addressed in future kernel updates for Red Hat Enterprise Linux 5 and 6.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-4350"
        },
        {
          "category": "external",
          "summary": "RHBZ#1007872",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007872"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4350",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-4350"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4350",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4350"
        }
      ],
      "release_date": "2010-12-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "kernel: net: sctp: ipv6 ipsec encryption bug in sctp_v6_xmit"
    },
    {
      "cve": "CVE-2013-4387",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2013-09-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1011927"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Kernel: net: IPv6: panic when UFO=On for an interface",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue does not affect the version of the kernel package as shipped with Red Hat Enterprise Linux 5.\n\nThis issue affects the versions of Linux kernel as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2. Future kernel updates for Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG 2 may address this issue.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
          "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
          "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
          "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2013-4387"
        },
        {
          "category": "external",
          "summary": "RHBZ#1011927",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1011927"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2013-4387",
          "url": "https://www.cve.org/CVERecord?id=CVE-2013-4387"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-4387",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4387"
        }
      ],
      "release_date": "2013-09-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2013-10-31T16:21:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258\n\nTo install kernel packages manually, use \"rpm -ivh [package]\". Do not use\n\"rpm -Uvh\" as that will remove the running kernel binaries from your\nsystem. You may use \"rpm -e\" to remove old kernels after determining that\nthe new kernel functions properly on your system.",
          "product_ids": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2013:1490"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.1,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.src",
            "6Server-MRG-Realtime-2:kernel-rt-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debug-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-debuginfo-common-x86_64-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-doc-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-firmware-0:3.8.13-rt14.25.el6rt.noarch",
            "6Server-MRG-Realtime-2:kernel-rt-trace-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-trace-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-debuginfo-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:kernel-rt-vanilla-devel-0:3.8.13-rt14.25.el6rt.x86_64",
            "6Server-MRG-Realtime-2:mrg-rt-release-0:3.8.13-rt14.25.el6rt.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Kernel: net: IPv6: panic when UFO=On for an interface"
    }
  ]
}

cve-2013-4299

Vulnerability from cvelistv5

Published

2013-10-24 10:00

Modified

2024-08-06 16:38

Severity ?

Summary

Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2013-1436.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2015-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1783.html	vendor-advisory, x_refsource_REDHAT
	https://github.com/torvalds/linux/commit/e9c6a182649f4259db704ae15a91ac820e63b0ca	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2043-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://rhn.redhat.com/errata/RHSA-2013-1519.html	vendor-advisory, x_refsource_REDHAT
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9c6a182649f4259db704ae15a91ac820e63b0ca	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2040-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2016-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1520.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2044-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2066-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1449.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-1860.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1004233	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2049-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2045-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1460.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-1450.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2042-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2041-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2067-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2046-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:38:01.920Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1436",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1436.html"
          },
          {
            "name": "USN-2015-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2015-1"
          },
          {
            "name": "RHSA-2013:1783",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1783.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/e9c6a182649f4259db704ae15a91ac820e63b0ca"
          },
          {
            "name": "USN-2043-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2043-1"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "name": "SUSE-SU-2015:0652",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
          },
          {
            "name": "RHSA-2013:1519",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1519.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9c6a182649f4259db704ae15a91ac820e63b0ca"
          },
          {
            "name": "USN-2040-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2040-1"
          },
          {
            "name": "USN-2016-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2016-1"
          },
          {
            "name": "RHSA-2013:1520",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1520.html"
          },
          {
            "name": "USN-2044-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2044-1"
          },
          {
            "name": "USN-2066-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2066-1"
          },
          {
            "name": "RHSA-2013:1449",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1449.html"
          },
          {
            "name": "RHSA-2013:1860",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1860.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1004233"
          },
          {
            "name": "USN-2049-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2049-1"
          },
          {
            "name": "USN-2045-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2045-1"
          },
          {
            "name": "RHSA-2013:1460",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1460.html"
          },
          {
            "name": "RHSA-2013:1450",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1450.html"
          },
          {
            "name": "USN-2050-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2050-1"
          },
          {
            "name": "USN-2042-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2042-1"
          },
          {
            "name": "USN-2041-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2041-1"
          },
          {
            "name": "USN-2067-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2067-1"
          },
          {
            "name": "USN-2046-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2046-1"
          },
          {
            "name": "SUSE-SU-2015:0812",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-10-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Interpretation conflict in drivers/md/dm-snap-persistent.c in the Linux kernel through 3.11.6 allows remote authenticated users to obtain sensitive information or modify data via a crafted mapping to a snapshot block device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-08T21:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2013:1436",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1436.html"
        },
        {
          "name": "USN-2015-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2015-1"
        },
        {
          "name": "RHSA-2013:1783",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1783.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/e9c6a182649f4259db704ae15a91ac820e63b0ca"
        },
        {
          "name": "USN-2043-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2043-1"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "name": "SUSE-SU-2015:0652",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html"
        },
        {
          "name": "RHSA-2013:1519",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1519.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9c6a182649f4259db704ae15a91ac820e63b0ca"
        },
        {
          "name": "USN-2040-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2040-1"
        },
        {
          "name": "USN-2016-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2016-1"
        },
        {
          "name": "RHSA-2013:1520",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1520.html"
        },
        {
          "name": "USN-2044-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2044-1"
        },
        {
          "name": "USN-2066-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2066-1"
        },
        {
          "name": "RHSA-2013:1449",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1449.html"
        },
        {
          "name": "RHSA-2013:1860",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1860.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1004233"
        },
        {
          "name": "USN-2049-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2049-1"
        },
        {
          "name": "USN-2045-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2045-1"
        },
        {
          "name": "RHSA-2013:1460",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1460.html"
        },
        {
          "name": "RHSA-2013:1450",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1450.html"
        },
        {
          "name": "USN-2050-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2050-1"
        },
        {
          "name": "USN-2042-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2042-1"
        },
        {
          "name": "USN-2041-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2041-1"
        },
        {
          "name": "USN-2067-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2067-1"
        },
        {
          "name": "USN-2046-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2046-1"
        },
        {
          "name": "SUSE-SU-2015:0812",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-4299",
    "datePublished": "2013-10-24T10:00:00",
    "dateReserved": "2013-06-12T00:00:00",
    "dateUpdated": "2024-08-06T16:38:01.920Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-4345

Vulnerability from cvelistv5

Published

2013-10-10 10:00

Modified

2024-08-06 16:38

Severity ?

Summary

Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-2065-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1007690	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2110-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2013-1645.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2076-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2158-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2070-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2071-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2109-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1449.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/62740	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-2074-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2068-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=linux-crypto-vger&m=137942122902845&w=2	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2072-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2075-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2064-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:38:01.956Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2065-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2065-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007690"
          },
          {
            "name": "USN-2110-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2110-1"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "name": "RHSA-2013:1645",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
          },
          {
            "name": "USN-2076-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2076-1"
          },
          {
            "name": "USN-2158-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2158-1"
          },
          {
            "name": "USN-2070-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2070-1"
          },
          {
            "name": "USN-2071-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2071-1"
          },
          {
            "name": "USN-2109-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2109-1"
          },
          {
            "name": "RHSA-2013:1449",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1449.html"
          },
          {
            "name": "62740",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/62740"
          },
          {
            "name": "USN-2074-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2074-1"
          },
          {
            "name": "USN-2068-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2068-1"
          },
          {
            "name": "[linux-crypto] 20130917 [PATCH] ansi_cprng: Fix off by one error in non-block size request",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-crypto-vger\u0026m=137942122902845\u0026w=2"
          },
          {
            "name": "USN-2072-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2072-1"
          },
          {
            "name": "USN-2075-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2075-1"
          },
          {
            "name": "USN-2064-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2064-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-09-17T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-05-19T17:57:00",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-2065-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2065-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007690"
        },
        {
          "name": "USN-2110-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2110-1"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "name": "RHSA-2013:1645",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
        },
        {
          "name": "USN-2076-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2076-1"
        },
        {
          "name": "USN-2158-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2158-1"
        },
        {
          "name": "USN-2070-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2070-1"
        },
        {
          "name": "USN-2071-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2071-1"
        },
        {
          "name": "USN-2109-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2109-1"
        },
        {
          "name": "RHSA-2013:1449",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1449.html"
        },
        {
          "name": "62740",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/62740"
        },
        {
          "name": "USN-2074-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2074-1"
        },
        {
          "name": "USN-2068-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2068-1"
        },
        {
          "name": "[linux-crypto] 20130917 [PATCH] ansi_cprng: Fix off by one error in non-block size request",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-crypto-vger\u0026m=137942122902845\u0026w=2"
        },
        {
          "name": "USN-2072-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2072-1"
        },
        {
          "name": "USN-2075-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2075-1"
        },
        {
          "name": "USN-2064-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2064-1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-4345",
    "datePublished": "2013-10-10T10:00:00",
    "dateReserved": "2013-06-12T00:00:00",
    "dateUpdated": "2024-08-06T16:38:01.956Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-4350

Vulnerability from cvelistv5

Published

2013-09-25 10:00

Modified

2024-08-06 16:38

Severity ?

Summary

The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network.

References

▼	URL	Tags
	https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2024-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2013/09/13/3	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2039-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2022-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2038-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2021-1	vendor-advisory, x_refsource_UBUNTU
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=95ee62083cb6453e056562d91f597552021e6ae7	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2019-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1007872	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2049-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2045-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2041-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:38:02.020Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7"
          },
          {
            "name": "USN-2024-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2024-1"
          },
          {
            "name": "[oss-security] 20130913 Re: CVE request -- Linux kernel: net: sctp: ipv6 ipsec encryption bug in sctp_v6_xmit",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2013/09/13/3"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "name": "USN-2039-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2039-1"
          },
          {
            "name": "USN-2022-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2022-1"
          },
          {
            "name": "USN-2038-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2038-1"
          },
          {
            "name": "USN-2021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2021-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=95ee62083cb6453e056562d91f597552021e6ae7"
          },
          {
            "name": "USN-2019-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2019-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007872"
          },
          {
            "name": "USN-2049-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2049-1"
          },
          {
            "name": "USN-2045-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2045-1"
          },
          {
            "name": "USN-2050-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2050-1"
          },
          {
            "name": "USN-2041-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2041-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-09-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-30T19:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7"
        },
        {
          "name": "USN-2024-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2024-1"
        },
        {
          "name": "[oss-security] 20130913 Re: CVE request -- Linux kernel: net: sctp: ipv6 ipsec encryption bug in sctp_v6_xmit",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2013/09/13/3"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "name": "USN-2039-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2039-1"
        },
        {
          "name": "USN-2022-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2022-1"
        },
        {
          "name": "USN-2038-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2038-1"
        },
        {
          "name": "USN-2021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2021-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=95ee62083cb6453e056562d91f597552021e6ae7"
        },
        {
          "name": "USN-2019-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2019-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007872"
        },
        {
          "name": "USN-2049-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2049-1"
        },
        {
          "name": "USN-2045-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2045-1"
        },
        {
          "name": "USN-2050-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2050-1"
        },
        {
          "name": "USN-2041-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2041-1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-4350",
    "datePublished": "2013-09-25T10:00:00",
    "dateReserved": "2013-06-12T00:00:00",
    "dateUpdated": "2024-08-06T16:38:02.020Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-0343

Vulnerability from cvelistv5

Published

2013-02-28 19:00

Modified

2024-08-06 14:25

Severity ?

Summary

The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-2024-1	vendor-advisory, x_refsource_UBUNTU
	http://openwall.com/lists/oss-security/2013/01/21/11	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1977-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2039-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2022-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=914664	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1645.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2038-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2020-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2021-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1976-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2019-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2013/02/22/6	mailing-list, x_refsource_MLIST
	http://openwall.com/lists/oss-security/2013/01/16/7	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2013-1449.html	vendor-advisory, x_refsource_REDHAT
	http://openwall.com/lists/oss-security/2012/12/05/4	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2023-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T14:25:09.787Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2024-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2024-1"
          },
          {
            "name": "[oss-security] 20130121 Re: Linux kernel handling of IPv6 temporary addresses",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2013/01/21/11"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "name": "USN-1977-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1977-1"
          },
          {
            "name": "USN-2039-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2039-1"
          },
          {
            "name": "USN-2022-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2022-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=914664"
          },
          {
            "name": "RHSA-2013:1645",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
          },
          {
            "name": "USN-2038-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2038-1"
          },
          {
            "name": "USN-2020-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2020-1"
          },
          {
            "name": "USN-2021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2021-1"
          },
          {
            "name": "USN-1976-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1976-1"
          },
          {
            "name": "USN-2019-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2019-1"
          },
          {
            "name": "[oss-security] 20130222 Re: Linux kernel handling of IPv6 temporary addresses",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2013/02/22/6"
          },
          {
            "name": "[oss-security] 20130116 Re: Linux kernel handling of IPv6 temporary addresses",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2013/01/16/7"
          },
          {
            "name": "RHSA-2013:1449",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1449.html"
          },
          {
            "name": "[oss-security] 20121205 Re: Linux kernel handling of IPv6 temporary addresses",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2012/12/05/4"
          },
          {
            "name": "openSUSE-SU-2014:0204",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html"
          },
          {
            "name": "USN-2023-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2023-1"
          },
          {
            "name": "USN-2050-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2050-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-12-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-03-04T15:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-2024-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2024-1"
        },
        {
          "name": "[oss-security] 20130121 Re: Linux kernel handling of IPv6 temporary addresses",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2013/01/21/11"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "name": "USN-1977-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1977-1"
        },
        {
          "name": "USN-2039-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2039-1"
        },
        {
          "name": "USN-2022-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2022-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=914664"
        },
        {
          "name": "RHSA-2013:1645",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
        },
        {
          "name": "USN-2038-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2038-1"
        },
        {
          "name": "USN-2020-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2020-1"
        },
        {
          "name": "USN-2021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2021-1"
        },
        {
          "name": "USN-1976-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1976-1"
        },
        {
          "name": "USN-2019-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2019-1"
        },
        {
          "name": "[oss-security] 20130222 Re: Linux kernel handling of IPv6 temporary addresses",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2013/02/22/6"
        },
        {
          "name": "[oss-security] 20130116 Re: Linux kernel handling of IPv6 temporary addresses",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2013/01/16/7"
        },
        {
          "name": "RHSA-2013:1449",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1449.html"
        },
        {
          "name": "[oss-security] 20121205 Re: Linux kernel handling of IPv6 temporary addresses",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2012/12/05/4"
        },
        {
          "name": "openSUSE-SU-2014:0204",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html"
        },
        {
          "name": "USN-2023-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2023-1"
        },
        {
          "name": "USN-2050-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2050-1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-0343",
    "datePublished": "2013-02-28T19:00:00",
    "dateReserved": "2012-12-06T00:00:00",
    "dateUpdated": "2024-08-06T14:25:09.787Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-2892

Vulnerability from cvelistv5

Published

2013-09-13 18:00

Modified

2024-08-06 15:52

Severity ?

Summary

drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-2024-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1977-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2039-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2022-1	vendor-advisory, x_refsource_UBUNTU
	http://openwall.com/lists/oss-security/2013/08/28/13	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2013-1645.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1995-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2038-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2013/dsa-2766	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2021-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1976-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2019-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/62049	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-1998-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=linux-input&m=137772185414625&w=1	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:52:21.020Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2024-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2024-1"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "name": "USN-1977-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1977-1"
          },
          {
            "name": "USN-2039-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2039-1"
          },
          {
            "name": "USN-2022-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2022-1"
          },
          {
            "name": "[oss-security] 20130828 Linux HID security flaws",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
          },
          {
            "name": "RHSA-2013:1645",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
          },
          {
            "name": "USN-1995-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1995-1"
          },
          {
            "name": "USN-2038-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2038-1"
          },
          {
            "name": "DSA-2766",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2766"
          },
          {
            "name": "USN-2021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2021-1"
          },
          {
            "name": "USN-1976-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1976-1"
          },
          {
            "name": "USN-2019-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2019-1"
          },
          {
            "name": "62049",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/62049"
          },
          {
            "name": "USN-1998-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1998-1"
          },
          {
            "name": "[linux-input] 20130828 [PATCH 06/14] HID: pantherlord: validate output report details",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-input\u0026m=137772185414625\u0026w=1"
          },
          {
            "name": "USN-2050-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2050-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-08-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T18:57:01",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "USN-2024-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2024-1"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "name": "USN-1977-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1977-1"
        },
        {
          "name": "USN-2039-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2039-1"
        },
        {
          "name": "USN-2022-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2022-1"
        },
        {
          "name": "[oss-security] 20130828 Linux HID security flaws",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
        },
        {
          "name": "RHSA-2013:1645",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
        },
        {
          "name": "USN-1995-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1995-1"
        },
        {
          "name": "USN-2038-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2038-1"
        },
        {
          "name": "DSA-2766",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2766"
        },
        {
          "name": "USN-2021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2021-1"
        },
        {
          "name": "USN-1976-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1976-1"
        },
        {
          "name": "USN-2019-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2019-1"
        },
        {
          "name": "62049",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/62049"
        },
        {
          "name": "USN-1998-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1998-1"
        },
        {
          "name": "[linux-input] 20130828 [PATCH 06/14] HID: pantherlord: validate output report details",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-input\u0026m=137772185414625\u0026w=1"
        },
        {
          "name": "USN-2050-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2050-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2013-2892",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-2024-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2024-1"
            },
            {
              "name": "RHSA-2013:1490",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
            },
            {
              "name": "USN-1977-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1977-1"
            },
            {
              "name": "USN-2039-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2039-1"
            },
            {
              "name": "USN-2022-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2022-1"
            },
            {
              "name": "[oss-security] 20130828 Linux HID security flaws",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
            },
            {
              "name": "RHSA-2013:1645",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
            },
            {
              "name": "USN-1995-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1995-1"
            },
            {
              "name": "USN-2038-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2038-1"
            },
            {
              "name": "DSA-2766",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2766"
            },
            {
              "name": "USN-2021-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2021-1"
            },
            {
              "name": "USN-1976-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1976-1"
            },
            {
              "name": "USN-2019-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2019-1"
            },
            {
              "name": "62049",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/62049"
            },
            {
              "name": "USN-1998-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1998-1"
            },
            {
              "name": "[linux-input] 20130828 [PATCH 06/14] HID: pantherlord: validate output report details",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-input\u0026m=137772185414625\u0026w=1"
            },
            {
              "name": "USN-2050-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2050-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2013-2892",
    "datePublished": "2013-09-13T18:00:00",
    "dateReserved": "2013-04-11T00:00:00",
    "dateUpdated": "2024-08-06T15:52:21.020Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-2893

Vulnerability from cvelistv5

Published

2013-09-13 18:00

Modified

2024-08-06 15:52

Severity ?

Summary

The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-2015-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2024-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=linux-input&m=137772186714627&w=1	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2039-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2022-1	vendor-advisory, x_refsource_UBUNTU
	http://openwall.com/lists/oss-security/2013/08/28/13	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2016-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2038-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2020-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2021-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2019-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/bid/62050	vdb-entry, x_refsource_BID
	http://www.ubuntu.com/usn/USN-2023-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:52:21.337Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2015-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2015-1"
          },
          {
            "name": "USN-2024-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2024-1"
          },
          {
            "name": "[linux-input] 20130828 [PATCH 07/14] HID: LG: validate HID output report details",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-input\u0026m=137772186714627\u0026w=1"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "name": "USN-2039-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2039-1"
          },
          {
            "name": "USN-2022-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2022-1"
          },
          {
            "name": "[oss-security] 20130828 Linux HID security flaws",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
          },
          {
            "name": "USN-2016-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2016-1"
          },
          {
            "name": "USN-2038-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2038-1"
          },
          {
            "name": "USN-2020-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2020-1"
          },
          {
            "name": "USN-2021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2021-1"
          },
          {
            "name": "SUSE-SU-2015:0481",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
          },
          {
            "name": "openSUSE-SU-2015:0566",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
          },
          {
            "name": "USN-2019-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2019-1"
          },
          {
            "name": "62050",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/62050"
          },
          {
            "name": "USN-2023-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2023-1"
          },
          {
            "name": "USN-2050-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2050-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-08-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-08T21:57:01",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "USN-2015-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2015-1"
        },
        {
          "name": "USN-2024-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2024-1"
        },
        {
          "name": "[linux-input] 20130828 [PATCH 07/14] HID: LG: validate HID output report details",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-input\u0026m=137772186714627\u0026w=1"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "name": "USN-2039-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2039-1"
        },
        {
          "name": "USN-2022-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2022-1"
        },
        {
          "name": "[oss-security] 20130828 Linux HID security flaws",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
        },
        {
          "name": "USN-2016-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2016-1"
        },
        {
          "name": "USN-2038-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2038-1"
        },
        {
          "name": "USN-2020-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2020-1"
        },
        {
          "name": "USN-2021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2021-1"
        },
        {
          "name": "SUSE-SU-2015:0481",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
        },
        {
          "name": "openSUSE-SU-2015:0566",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
        },
        {
          "name": "USN-2019-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2019-1"
        },
        {
          "name": "62050",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/62050"
        },
        {
          "name": "USN-2023-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2023-1"
        },
        {
          "name": "USN-2050-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2050-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2013-2893",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-2015-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2015-1"
            },
            {
              "name": "USN-2024-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2024-1"
            },
            {
              "name": "[linux-input] 20130828 [PATCH 07/14] HID: LG: validate HID output report details",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-input\u0026m=137772186714627\u0026w=1"
            },
            {
              "name": "RHSA-2013:1490",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
            },
            {
              "name": "USN-2039-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2039-1"
            },
            {
              "name": "USN-2022-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2022-1"
            },
            {
              "name": "[oss-security] 20130828 Linux HID security flaws",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
            },
            {
              "name": "USN-2016-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2016-1"
            },
            {
              "name": "USN-2038-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2038-1"
            },
            {
              "name": "USN-2020-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2020-1"
            },
            {
              "name": "USN-2021-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2021-1"
            },
            {
              "name": "SUSE-SU-2015:0481",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html"
            },
            {
              "name": "openSUSE-SU-2015:0566",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html"
            },
            {
              "name": "USN-2019-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2019-1"
            },
            {
              "name": "62050",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/62050"
            },
            {
              "name": "USN-2023-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2023-1"
            },
            {
              "name": "USN-2050-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2050-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2013-2893",
    "datePublished": "2013-09-13T18:00:00",
    "dateReserved": "2013-04-11T00:00:00",
    "dateUpdated": "2024-08-06T15:52:21.337Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-2896

Vulnerability from cvelistv5

Published

2013-09-13 18:00

Modified

2024-08-06 15:52

Severity ?

Summary

drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-2024-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2039-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2022-1	vendor-advisory, x_refsource_UBUNTU
	http://openwall.com/lists/oss-security/2013/08/28/13	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-1995-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2038-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2021-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=linux-input&m=137772189314633&w=1	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2019-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1998-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:52:21.536Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2024-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2024-1"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "name": "USN-2039-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2039-1"
          },
          {
            "name": "USN-2022-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2022-1"
          },
          {
            "name": "[oss-security] 20130828 Linux HID security flaws",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
          },
          {
            "name": "USN-1995-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1995-1"
          },
          {
            "name": "USN-2038-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2038-1"
          },
          {
            "name": "USN-2021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2021-1"
          },
          {
            "name": "[linux-input] 20130828 [PATCH 10/14] HID: ntrig: validate feature report details",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-input\u0026m=137772189314633\u0026w=1"
          },
          {
            "name": "USN-2019-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2019-1"
          },
          {
            "name": "USN-1998-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1998-1"
          },
          {
            "name": "USN-2050-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2050-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-08-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-30T19:57:01",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "USN-2024-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2024-1"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "name": "USN-2039-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2039-1"
        },
        {
          "name": "USN-2022-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2022-1"
        },
        {
          "name": "[oss-security] 20130828 Linux HID security flaws",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
        },
        {
          "name": "USN-1995-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1995-1"
        },
        {
          "name": "USN-2038-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2038-1"
        },
        {
          "name": "USN-2021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2021-1"
        },
        {
          "name": "[linux-input] 20130828 [PATCH 10/14] HID: ntrig: validate feature report details",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-input\u0026m=137772189314633\u0026w=1"
        },
        {
          "name": "USN-2019-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2019-1"
        },
        {
          "name": "USN-1998-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1998-1"
        },
        {
          "name": "USN-2050-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2050-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2013-2896",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-2024-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2024-1"
            },
            {
              "name": "RHSA-2013:1490",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
            },
            {
              "name": "USN-2039-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2039-1"
            },
            {
              "name": "USN-2022-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2022-1"
            },
            {
              "name": "[oss-security] 20130828 Linux HID security flaws",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
            },
            {
              "name": "USN-1995-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1995-1"
            },
            {
              "name": "USN-2038-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2038-1"
            },
            {
              "name": "USN-2021-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2021-1"
            },
            {
              "name": "[linux-input] 20130828 [PATCH 10/14] HID: ntrig: validate feature report details",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-input\u0026m=137772189314633\u0026w=1"
            },
            {
              "name": "USN-2019-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2019-1"
            },
            {
              "name": "USN-1998-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1998-1"
            },
            {
              "name": "USN-2050-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2050-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2013-2896",
    "datePublished": "2013-09-13T18:00:00",
    "dateReserved": "2013-04-11T00:00:00",
    "dateUpdated": "2024-08-06T15:52:21.536Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-2895

Vulnerability from cvelistv5

Published

2013-09-13 18:00

Modified

2024-08-06 15:52

Severity ?

Summary

drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-2024-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2039-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2022-1	vendor-advisory, x_refsource_UBUNTU
	http://openwall.com/lists/oss-security/2013/08/28/13	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2038-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2020-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2021-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2019-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2023-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=linux-input&m=137772188314631&w=1	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:52:21.363Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2024-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2024-1"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "name": "USN-2039-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2039-1"
          },
          {
            "name": "USN-2022-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2022-1"
          },
          {
            "name": "[oss-security] 20130828 Linux HID security flaws",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
          },
          {
            "name": "USN-2038-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2038-1"
          },
          {
            "name": "USN-2020-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2020-1"
          },
          {
            "name": "USN-2021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2021-1"
          },
          {
            "name": "USN-2019-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2019-1"
          },
          {
            "name": "USN-2023-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2023-1"
          },
          {
            "name": "USN-2050-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2050-1"
          },
          {
            "name": "[linux-input] 20130828 [PATCH 09/14] HID: logitech-dj: validate output report details",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-input\u0026m=137772188314631\u0026w=1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-08-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-30T19:57:01",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "USN-2024-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2024-1"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "name": "USN-2039-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2039-1"
        },
        {
          "name": "USN-2022-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2022-1"
        },
        {
          "name": "[oss-security] 20130828 Linux HID security flaws",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
        },
        {
          "name": "USN-2038-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2038-1"
        },
        {
          "name": "USN-2020-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2020-1"
        },
        {
          "name": "USN-2021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2021-1"
        },
        {
          "name": "USN-2019-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2019-1"
        },
        {
          "name": "USN-2023-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2023-1"
        },
        {
          "name": "USN-2050-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2050-1"
        },
        {
          "name": "[linux-input] 20130828 [PATCH 09/14] HID: logitech-dj: validate output report details",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-input\u0026m=137772188314631\u0026w=1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2013-2895",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-2024-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2024-1"
            },
            {
              "name": "RHSA-2013:1490",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
            },
            {
              "name": "USN-2039-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2039-1"
            },
            {
              "name": "USN-2022-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2022-1"
            },
            {
              "name": "[oss-security] 20130828 Linux HID security flaws",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
            },
            {
              "name": "USN-2038-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2038-1"
            },
            {
              "name": "USN-2020-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2020-1"
            },
            {
              "name": "USN-2021-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2021-1"
            },
            {
              "name": "USN-2019-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2019-1"
            },
            {
              "name": "USN-2023-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2023-1"
            },
            {
              "name": "USN-2050-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2050-1"
            },
            {
              "name": "[linux-input] 20130828 [PATCH 09/14] HID: logitech-dj: validate output report details",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-input\u0026m=137772188314631\u0026w=1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2013-2895",
    "datePublished": "2013-09-13T18:00:00",
    "dateReserved": "2013-04-11T00:00:00",
    "dateUpdated": "2024-08-06T15:52:21.363Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-4387

Vulnerability from cvelistv5

Published

2013-10-10 10:00

Modified

2024-08-06 16:45

Severity ?

Summary

net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-2024-1	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.redhat.com/show_bug.cgi?id=1011927	x_refsource_CONFIRM
	https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2039-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2022-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2013-1645.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2038-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2021-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2019-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2049-1	vendor-advisory, x_refsource_UBUNTU
	http://rhn.redhat.com/errata/RHSA-2014-0284.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-2045-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2041-1	vendor-advisory, x_refsource_UBUNTU
	http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2811ebac2521ceac84f2bdae402455baa6a7fb47	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2013/09/29/1	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:45:14.577Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2024-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2024-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1011927"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "name": "USN-2039-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2039-1"
          },
          {
            "name": "USN-2022-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2022-1"
          },
          {
            "name": "RHSA-2013:1645",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
          },
          {
            "name": "USN-2038-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2038-1"
          },
          {
            "name": "USN-2021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2021-1"
          },
          {
            "name": "USN-2019-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2019-1"
          },
          {
            "name": "USN-2049-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2049-1"
          },
          {
            "name": "RHSA-2014:0284",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2014-0284.html"
          },
          {
            "name": "USN-2045-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2045-1"
          },
          {
            "name": "USN-2050-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2050-1"
          },
          {
            "name": "USN-2041-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2041-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2811ebac2521ceac84f2bdae402455baa6a7fb47"
          },
          {
            "name": "[oss-security] 20130928 Re: linux kernel memory corruption with ipv6 udp offloading",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2013/09/29/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-09-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-03-17T13:57:00",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "USN-2024-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2024-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1011927"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "name": "USN-2039-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2039-1"
        },
        {
          "name": "USN-2022-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2022-1"
        },
        {
          "name": "RHSA-2013:1645",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
        },
        {
          "name": "USN-2038-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2038-1"
        },
        {
          "name": "USN-2021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2021-1"
        },
        {
          "name": "USN-2019-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2019-1"
        },
        {
          "name": "USN-2049-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2049-1"
        },
        {
          "name": "RHSA-2014:0284",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2014-0284.html"
        },
        {
          "name": "USN-2045-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2045-1"
        },
        {
          "name": "USN-2050-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2050-1"
        },
        {
          "name": "USN-2041-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2041-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2811ebac2521ceac84f2bdae402455baa6a7fb47"
        },
        {
          "name": "[oss-security] 20130928 Re: linux kernel memory corruption with ipv6 udp offloading",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2013/09/29/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-4387",
    "datePublished": "2013-10-10T10:00:00",
    "dateReserved": "2013-06-12T00:00:00",
    "dateUpdated": "2024-08-06T16:45:14.577Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-2888

Vulnerability from cvelistv5

Published

2013-09-13 18:00

Modified

2024-08-06 15:52

Severity ?

Summary

Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID.

References

▼	URL	Tags
	http://www.ubuntu.com/usn/USN-2024-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=linux-input&m=137772180514608&w=1	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1977-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2039-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2022-1	vendor-advisory, x_refsource_UBUNTU
	http://openwall.com/lists/oss-security/2013/08/28/13	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2013-1645.html	vendor-advisory, x_refsource_REDHAT
	http://www.ubuntu.com/usn/USN-1995-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2038-1	vendor-advisory, x_refsource_UBUNTU
	http://www.debian.org/security/2013/dsa-2766	vendor-advisory, x_refsource_DEBIAN
	http://www.ubuntu.com/usn/USN-2021-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1976-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2019-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-1998-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2050-1	vendor-advisory, x_refsource_UBUNTU

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T15:52:20.678Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "USN-2024-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2024-1"
          },
          {
            "name": "[linux-input] 20130828 [PATCH 01/14] HID: validate HID report id size",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-input\u0026m=137772180514608\u0026w=1"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "name": "USN-1977-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1977-1"
          },
          {
            "name": "USN-2039-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2039-1"
          },
          {
            "name": "USN-2022-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2022-1"
          },
          {
            "name": "[oss-security] 20130828 Linux HID security flaws",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
          },
          {
            "name": "RHSA-2013:1645",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
          },
          {
            "name": "USN-1995-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1995-1"
          },
          {
            "name": "USN-2038-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2038-1"
          },
          {
            "name": "DSA-2766",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2013/dsa-2766"
          },
          {
            "name": "USN-2021-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2021-1"
          },
          {
            "name": "USN-1976-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1976-1"
          },
          {
            "name": "USN-2019-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2019-1"
          },
          {
            "name": "USN-1998-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1998-1"
          },
          {
            "name": "USN-2050-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2050-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-08-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2013-12-30T19:57:01",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "USN-2024-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2024-1"
        },
        {
          "name": "[linux-input] 20130828 [PATCH 01/14] HID: validate HID report id size",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-input\u0026m=137772180514608\u0026w=1"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "name": "USN-1977-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1977-1"
        },
        {
          "name": "USN-2039-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2039-1"
        },
        {
          "name": "USN-2022-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2022-1"
        },
        {
          "name": "[oss-security] 20130828 Linux HID security flaws",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
        },
        {
          "name": "RHSA-2013:1645",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
        },
        {
          "name": "USN-1995-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1995-1"
        },
        {
          "name": "USN-2038-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2038-1"
        },
        {
          "name": "DSA-2766",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2013/dsa-2766"
        },
        {
          "name": "USN-2021-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2021-1"
        },
        {
          "name": "USN-1976-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1976-1"
        },
        {
          "name": "USN-2019-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2019-1"
        },
        {
          "name": "USN-1998-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1998-1"
        },
        {
          "name": "USN-2050-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2050-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2013-2888",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "USN-2024-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2024-1"
            },
            {
              "name": "[linux-input] 20130828 [PATCH 01/14] HID: validate HID report id size",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=linux-input\u0026m=137772180514608\u0026w=1"
            },
            {
              "name": "RHSA-2013:1490",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
            },
            {
              "name": "USN-1977-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1977-1"
            },
            {
              "name": "USN-2039-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2039-1"
            },
            {
              "name": "USN-2022-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2022-1"
            },
            {
              "name": "[oss-security] 20130828 Linux HID security flaws",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2013/08/28/13"
            },
            {
              "name": "RHSA-2013:1645",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2013-1645.html"
            },
            {
              "name": "USN-1995-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1995-1"
            },
            {
              "name": "USN-2038-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2038-1"
            },
            {
              "name": "DSA-2766",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2013/dsa-2766"
            },
            {
              "name": "USN-2021-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2021-1"
            },
            {
              "name": "USN-1976-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1976-1"
            },
            {
              "name": "USN-2019-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2019-1"
            },
            {
              "name": "USN-1998-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1998-1"
            },
            {
              "name": "USN-2050-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2050-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2013-2888",
    "datePublished": "2013-09-13T18:00:00",
    "dateReserved": "2013-04-11T00:00:00",
    "dateUpdated": "2024-08-06T15:52:20.678Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-4343

Vulnerability from cvelistv5

Published

2013-09-25 10:00

Modified

2024-08-06 16:38

Severity ?

Summary

Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call.

References

▼	URL	Tags
	http://www.spinics.net/lists/netdev/msg250066.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1007733	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2020-1	vendor-advisory, x_refsource_UBUNTU
	http://marc.info/?l=linux-kernel&m=137889490510745&w=2	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2013/09/12/3	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-2049-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-2023-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:38:01.983Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[netdev] 20130911 Use-after-free in TUNSETIFF",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.spinics.net/lists/netdev/msg250066.html"
          },
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007733"
          },
          {
            "name": "USN-2020-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2020-1"
          },
          {
            "name": "[linux-kernel] 20130911 [PATCH net V2] tuntap: correctly handle error in tun_set_iff()",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=linux-kernel\u0026m=137889490510745\u0026w=2"
          },
          {
            "name": "[oss-security] 20130912 Fwd: Use-after-free in TUNSETIFF",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2013/09/12/3"
          },
          {
            "name": "USN-2049-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2049-1"
          },
          {
            "name": "USN-2023-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2023-1"
          },
          {
            "name": "openSUSE-SU-2019:1479",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
          },
          {
            "name": "openSUSE-SU-2019:1570",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
          },
          {
            "name": "openSUSE-SU-2019:1579",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-09-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-06-18T23:06:04",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[netdev] 20130911 Use-after-free in TUNSETIFF",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.spinics.net/lists/netdev/msg250066.html"
        },
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007733"
        },
        {
          "name": "USN-2020-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2020-1"
        },
        {
          "name": "[linux-kernel] 20130911 [PATCH net V2] tuntap: correctly handle error in tun_set_iff()",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=linux-kernel\u0026m=137889490510745\u0026w=2"
        },
        {
          "name": "[oss-security] 20130912 Fwd: Use-after-free in TUNSETIFF",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2013/09/12/3"
        },
        {
          "name": "USN-2049-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2049-1"
        },
        {
          "name": "USN-2023-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2023-1"
        },
        {
          "name": "openSUSE-SU-2019:1479",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html"
        },
        {
          "name": "openSUSE-SU-2019:1570",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html"
        },
        {
          "name": "openSUSE-SU-2019:1579",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-4343",
    "datePublished": "2013-09-25T10:00:00",
    "dateReserved": "2013-06-12T00:00:00",
    "dateUpdated": "2024-08-06T16:38:01.983Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2013-4348

Vulnerability from cvelistv5

Published

2013-11-04 11:00

Modified

2024-08-06 16:38

Severity ?

Summary

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2013-1490.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=1007939	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-2070-1	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-2075-1	vendor-advisory, x_refsource_UBUNTU
	https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=6f092343855a71e03b8d209815d8c45bf3a27fcd	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T16:38:01.919Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2013:1490",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007939"
          },
          {
            "name": "USN-2070-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2070-1"
          },
          {
            "name": "openSUSE-SU-2014:0204",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html"
          },
          {
            "name": "USN-2075-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2075-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=6f092343855a71e03b8d209815d8c45bf3a27fcd"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2013-10-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2014-03-04T15:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2013:1490",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2013-1490.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1007939"
        },
        {
          "name": "USN-2070-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2070-1"
        },
        {
          "name": "openSUSE-SU-2014:0204",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html"
        },
        {
          "name": "USN-2075-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2075-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=6f092343855a71e03b8d209815d8c45bf3a27fcd"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2013-4348",
    "datePublished": "2013-11-04T11:00:00",
    "dateReserved": "2013-06-12T00:00:00",
    "dateUpdated": "2024-08-06T16:38:01.919Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature