Vulnerability in Linux Kernel
CVE-2013-0913
Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.2 (High). Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.006 (44.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 44th percentile — 44.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000
Affected products
- Linux Kernel
- openSUSE — versions 11.4, 12.1
Weakness classification (CWE)
References
- lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html (vendor-advisory, VDB Entry, Third Party Advisory)
- bugzilla.redhat.com/show_bug.cgi (Issue Tracking)
- www.ubuntu.com/usn/USN-1812-1 (vendor-advisory, VDB Entry, Third Party Advisory)
- openwall.com/lists/oss-security/2013/03/11/6 (mailing-list, Mailing List)
- www.ubuntu.com/usn/USN-1809-1 (vendor-advisory, VDB Entry, Third Party Advisory)
- openwall.com/lists/oss-security/2013/03/14/22 (mailing-list, Mailing List)
- www.ubuntu.com/usn/USN-1814-1 (vendor-advisory, VDB Entry, Third Party Advisory)
- openwall.com/lists/oss-security/2013/03/13/9 (mailing-list, Mailing List)
- gerrit.chromium.org/gerrit/45118 (Third Party Advisory)
- rhn.redhat.com/errata/RHSA-2013-0744.html (vendor-advisory, VDB Entry, Third Party Advisory)