What is CVE-2013-7445?

CVE-2013-7445 is a vulnerability in Linux Kernel, classified under CWE-399. Published 2015-10-16.

Is CVE-2013-7445 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Linux Kernel

CVE-2013-7445

The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.

EPSS: 0.027 (84.6th percentile) — read the EPSS interpretation.

Affected products

Linux Linux_kernel — versions 4.0.1, 4.0.2, 4.0.3
N/a — versions n/a

Weakness classification (CWE)

CWE-399

Public proof-of-concept exploits

bygregonline/devsec-fastapi-report
robertsirc/sle-bci-demo
shakyaraj9569/Documentation
sjourdan/clair-lab

References

cret@cert.org (x_refsource_MISC)

Frequently asked questions

What is CVE-2013-7445?: CVE-2013-7445 is a vulnerability in Linux Kernel, classified under CWE-399. Published 2015-10-16.
Is CVE-2013-7445 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.