CVE-2013-4387
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for...
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
Exploit likelihood
What each source reports
NVD Score used
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
- Record
CVE-2013-4387- CVSS 2.0
- 6.1 Medium
AV:A/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
- Record
CVE-2013-4387- Updated
- 2026-11-02
EUVDEUVD-2013-4268 No score
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
- Record
EUVD-2013-4268- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6wfg-v8rh-62wj No score
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for...
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
- Record
GHSA-6wfg-v8rh-62wj- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
- Record
CVE-2013-4387- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4387 No score
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
- Record
DEBIAN-CVE-2013-4387- Updated
- 2026-11-02
Show 11 moreShow less
OSVMGASA-2013-0342 No score
Updated kernel package fixes security vulnerabilites.
This kernel update provides the upstream 3.4.69 kernel and fixes the following security issues:
The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test (CVE-2013-2015).
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device (CVE-2013-2895).
drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2896).
Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2897).
drivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PICOLCD is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2899).
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call (CVE-2013-4162).
The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6_MTU setsockopt option had been specified, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call (CVE-2013-4163).
The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by…
- Record
MGASA-2013-0342- Updated
- 2026-11-02
OSVMGASA-2013-0343 No score
Updated kernel-linus package fixes security vulnerabilites.
This kernel-linus update provides the upstream 3.4.69 kernel and fixes the following security issues:
The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test (CVE-2013-2015).
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device (CVE-2013-2895).
drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2896).
Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2897).
drivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PICOLCD is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2899).
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call (CVE-2013-4162).
The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6_MTU setsockopt option had been specified, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call (CVE-2013-4163).
The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system…
- Record
MGASA-2013-0343- Updated
- 2026-11-02
OSVMGASA-2013-0344 No score
Updated kernel-tmb package fixes security vulnerabilites.
This kernel-tmb update provides the upstream 3.4.69 kernel and fixes the following security issues:
The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test (CVE-2013-2015).
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device (CVE-2013-2895).
drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2896).
Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2897).
drivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PICOLCD is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2899).
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call (CVE-2013-4162).
The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6_MTU setsockopt option had been specified, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call (CVE-2013-4163).
The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash)…
- Record
MGASA-2013-0344- Updated
- 2026-11-02
OSVMGASA-2013-0345 No score
Updated kernel-rt package fixes security vulnerabilites.
This kernel-rt update provides the upstream 3.4.69 kernel and fixes the following security issues:
The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test (CVE-2013-2015).
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device (CVE-2013-2895).
drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2896).
Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2897).
drivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PICOLCD is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2899).
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call (CVE-2013-4162).
The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6_MTU setsockopt option had been specified, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call (CVE-2013-4163).
The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash)…
- Record
MGASA-2013-0345- Updated
- 2026-11-02
OSVMGASA-2013-0346 No score
Updated kernel-vserver package fixes security vulnerabilites.
This kernel-vserver update provides the upstream 3.4.69 kernel and fixes the following security issues:
The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test (CVE-2013-2015).
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) or obtain sensitive information from kernel memory via a crafted device (CVE-2013-2895).
drivers/hid/hid-ntrig.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_NTRIG is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2896).
Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2897).
drivers/hid/hid-picolcd_core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PICOLCD is enabled, allows physically proximate attackers to cause a denial of service (NULL pointer dereference and OOPS) via a crafted device (CVE-2013-2899).
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call (CVE-2013-4162).
The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly maintain information about whether the IPV6_MTU setsockopt option had been specified, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call (CVE-2013-4163).
The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system…
- Record
MGASA-2013-0346- Updated
- 2026-11-02
OSVMGASA-2013-0371 No score
Updated kernel and related packages fix security vulnerabilities
This kernel update provides an update to the 3.10 longterm branch, currently 3.10.24 and fixes the following security issues:
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.10 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. (CVE-2013-0343)
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. (CVE-2013-1059)
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. (CVE-2013-2140)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. (CVE-2013-2147)
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name. (CVE-2013-2851)
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2891)
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2894)
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11,…
- Record
MGASA-2013-0371- Updated
- 2026-11-02
OSVMGASA-2013-0372 No score
Updated kernel-linus packages fix security vulnerabilities
This kernel-linus update provides an update to the 3.10 longterm branch, currently 3.10.24 and fixes the following security issues:
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.10 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. (CVE-2013-0343)
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. (CVE-2013-1059)
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. (CVE-2013-2140)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. (CVE-2013-2147)
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name. (CVE-2013-2851)
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2891)
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2894)
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through…
- Record
MGASA-2013-0372- Updated
- 2026-11-02
OSVMGASA-2013-0373 No score
Updated kernel-tmb packages fix security vulnerabilities
This kernel-tmb update provides an update to the 3.10 longterm branch, currently 3.10.24 and fixes the following security issues:
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.10 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. (CVE-2013-0343)
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. (CVE-2013-1059)
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. (CVE-2013-2140)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. (CVE-2013-2147)
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name. (CVE-2013-2851)
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2891)
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2894)
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through…
- Record
MGASA-2013-0373- Updated
- 2026-11-02
OSVMGASA-2013-0374 No score
Updated kernel-rt packages fix security vulnerabilities
This kernel-rt update provides an update to the 3.10 longterm branch, currently 3.10.24 and fixes the following security issues:
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.10 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. (CVE-2013-0343)
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. (CVE-2013-1059)
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. (CVE-2013-2140)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. (CVE-2013-2147)
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name. (CVE-2013-2851)
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2891)
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2894)
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through…
- Record
MGASA-2013-0374- Updated
- 2026-11-02
OSVMGASA-2013-0375 No score
Updated kernel-vserver packages fix security vulnerabilities
This kernel-vserver update provides an update to the 3.10 longterm branch, currently 3.10.24 and fixes the following security issues:
The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.10 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages. (CVE-2013-0343)
net/ceph/auth_none.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via an auth_reply message that triggers an attempted build_request operation. (CVE-2013-1059)
The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature. (CVE-2013-2140)
The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory via (1) a crafted IDAGETPCIINFO command for a /dev/ida device, related to the ida_locked_ioctl function in drivers/block/cpqarray.c or (2) a crafted CCISS_PASSTHRU32 command for a /dev/cciss device, related to the cciss_ioctl32_passthru function in drivers/block/cciss.c. (CVE-2013-2147)
Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain privileges by leveraging root access and writing format string specifiers to /sys/module/md_mod/parameters/new_array in order to create a crafted /dev/md device name. (CVE-2013-2851)
Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID (CVE-2013-2888).
drivers/hid/hid-zpff.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_ZEROPLUS is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2889).
drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2891)
drivers/hid/hid-pl.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_PANTHERLORD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device (CVE-2013-2892).
The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device, related to (1) drivers/hid/hid-lgff.c, (2) drivers/hid/hid-lg3ff.c, and (3) drivers/hid/hid-lg4ff.c (CVE-2013-2893).
drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LENOVO_TPKBD is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device. (CVE-2013-2894)
drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through…
- Record
MGASA-2013-0375- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4387 No score
net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet.
- Record
UBUNTU-CVE-2013-4387- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linuxDebian:12 |
before 3.11.5-1 | 3.11.5-1 |
linuxDebian:13 |
before 3.11.5-1 | 3.11.5-1 |
linuxDebian:14 |
before 3.11.5-1 | 3.11.5-1 |
linux-2.6Debian:6.0 From an advisory covering 12 CVEs |
before 2.6.32-48squeeze8, plus listed versions 2.6.32-302.6.32-30+m68k.52.6.32-312.6.32-31~bpo50+12.6.32-32 Show 29 moreShow less2.6.32-332.6.32-342.6.32-34squeeze12.6.32-352.6.32-35squeeze12.6.32-35squeeze22.6.32-35~bpo50+12.6.32-362.6.32-372.6.32-382.6.32-392.6.32-39squeeze12.6.32-402.6.32-412.6.32-41squeeze22.6.32-422.6.32-432.6.32-442.6.32-452.6.32-462.6.32-46squeeze12.6.32-472.6.32-482.6.32-48squeeze12.6.32-48squeeze32.6.32-48squeeze42.6.32-48squeeze52.6.32-48squeeze62.6.32-48squeeze7 |
2.6.32-48squeeze8 |
kernelMageia:2 From an advisory covering 17 CVEs |
before 3.4.69-1.mga2 | 3.4.69-1.mga2 |
kernel-userspace-headersMageia:2 From an advisory covering 17 CVEs |
before 3.4.69-1.mga2 | 3.4.69-1.mga2 |
kmod-vboxadditionsMageia:2 From an advisory covering 17 CVEs |
before 4.2.16-5.mga2 | 4.2.16-5.mga2 |
kmod-virtualboxMageia:2 From an advisory covering 17 CVEs |
before 4.2.16-5.mga2 | 4.2.16-5.mga2 |
kmod-xtables-addonsMageia:2 From an advisory covering 17 CVEs |
before 1.41-33.mga2 | 1.41-33.mga2 |
kmod-broadcom-wlMageia:2 From an advisory covering 17 CVEs |
before 5.100.82.112-52.mga2.nonfree | 5.100.82.112-52.mga2.nonfree |
Show 149 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kmod-fglrxMageia:2 From an advisory covering 17 CVEs |
before 8.961-28.mga2.nonfree | 8.961-28.mga2.nonfree |
kmod-nvidia173Mageia:2 From an advisory covering 17 CVEs |
before 173.14.36-18.mga2.nonfree | 173.14.36-18.mga2.nonfree |
kmod-nvidia96xxMageia:2 From an advisory covering 17 CVEs |
before 96.43.23-19.mga2.nonfree | 96.43.23-19.mga2.nonfree |
kmod-nvidia-currentMageia:2 From an advisory covering 17 CVEs |
before 295.71-23.mga2.nonfree | 295.71-23.mga2.nonfree |
kernel-linusMageia:2 From an advisory covering 17 CVEs |
before 3.4.69-1.mga2 | 3.4.69-1.mga2 |
kernel-tmbMageia:2 From an advisory covering 17 CVEs |
before 3.4.69-1.mga2 | 3.4.69-1.mga2 |
kernel-rtMageia:2 From an advisory covering 17 CVEs |
before 3.4.69-0.rt83.1.mga2 | 3.4.69-0.rt83.1.mga2 |
kernel-vserverMageia:2 From an advisory covering 17 CVEs |
before 3.4.69-1.mga2 | 3.4.69-1.mga2 |
btrfs-progsMageia:3 From an advisory covering 36 CVEs |
before 0.20-0.rc1.20130705.2.mga3 | 0.20-0.rc1.20130705.2.mga3 |
drakxtoolsMageia:3 From an advisory covering 36 CVEs |
before 15.54.1-3.mga3 | 15.54.1-3.mga3 |
kernelMageia:3 From an advisory covering 36 CVEs |
before 3.10.24-2.mga3 | 3.10.24-2.mga3 |
kernel-firmwareMageia:3 From an advisory covering 36 CVEs |
before 20130624-1.mga3 | 20130624-1.mga3 |
kernel-userspace-headersMageia:3 From an advisory covering 36 CVEs |
before 3.10.24-2.mga3 | 3.10.24-2.mga3 |
kmod-vboxadditionsMageia:3 From an advisory covering 36 CVEs |
before 4.2.16-4.mga3 | 4.2.16-4.mga3 |
kmod-virtualboxMageia:3 From an advisory covering 36 CVEs |
before 4.2.16-4.mga3 | 4.2.16-4.mga3 |
kmod-xtables-addonsMageia:3 From an advisory covering 36 CVEs |
before 2.3-8.mga3 | 2.3-8.mga3 |
ldetect-lstMageia:3 From an advisory covering 36 CVEs |
before 0.1.330-1.mga3 | 0.1.330-1.mga3 |
libdrmMageia:3 From an advisory covering 36 CVEs |
before 2.4.46-1.mga3 | 2.4.46-1.mga3 |
mesaMageia:3 From an advisory covering 36 CVEs |
before 9.1.7-1.1.mga3 | 9.1.7-1.1.mga3 |
x11-driver-video-atiMageia:3 From an advisory covering 36 CVEs |
before 7.2.0-1.mga3 | 7.2.0-1.mga3 |
x11-driver-video-intelMageia:3 From an advisory covering 36 CVEs |
before 2.21.15-1.mga3 | 2.21.15-1.mga3 |
x11-driver-video-nouveauMageia:3 From an advisory covering 36 CVEs |
before 1.0.9-1.mga3 | 1.0.9-1.mga3 |
xtables-addonsMageia:3 From an advisory covering 36 CVEs |
before 2.3-2.mga3 | 2.3-2.mga3 |
broadcom-wlMageia:3 From an advisory covering 36 CVEs |
before 6.30.223.141-1.mga3.nonfree | 6.30.223.141-1.mga3.nonfree |
fglrxMageia:3 From an advisory covering 36 CVEs |
before 13.250.18-0.1.mga3.nonfree | 13.250.18-0.1.mga3.nonfree |
kernel-firmware-nonfreeMageia:3 From an advisory covering 36 CVEs |
before 20130624-1.mga3.nonfree | 20130624-1.mga3.nonfree |
kmod-broadcom-wlMageia:3 From an advisory covering 36 CVEs |
before 6.30.223.141-7.mga3.nonfree | 6.30.223.141-7.mga3.nonfree |
kmod-fglrxMageia:3 From an advisory covering 36 CVEs |
before 13.250.18-5.mga3.nonfree | 13.250.18-5.mga3.nonfree |
kmod-nvidia173Mageia:3 From an advisory covering 36 CVEs |
before 173.14.38-24.mga3.nonfree | 173.14.38-24.mga3.nonfree |
kmod-nvidia304Mageia:3 From an advisory covering 36 CVEs |
before 304.108-9.mga3.nonfree | 304.108-9.mga3.nonfree |
kmod-nvidia-currentMageia:3 From an advisory covering 36 CVEs |
before 319.60-8.mga3.nonfree | 319.60-8.mga3.nonfree |
nvidia173Mageia:3 From an advisory covering 36 CVEs |
before 173.14.38-1.mga3.nonfree | 173.14.38-1.mga3.nonfree |
nvidia304Mageia:3 From an advisory covering 36 CVEs |
before 304.108-2.mga3.nonfree | 304.108-2.mga3.nonfree |
nvidia-currentMageia:3 From an advisory covering 36 CVEs |
before 319.60-1.mga3.nonfree | 319.60-1.mga3.nonfree |
radeon-firmwareMageia:3 From an advisory covering 36 CVEs |
before 20130626-2.mga3.nonfree | 20130626-2.mga3.nonfree |
mesaMageia:3 From an advisory covering 36 CVEs |
before 9.1.7-1.1.mga3.tainted | 9.1.7-1.1.mga3.tainted |
kernel-linusMageia:3 From an advisory covering 31 CVEs |
before 3.10.24-1.mga3 | 3.10.24-1.mga3 |
kernel-tmbMageia:3 From an advisory covering 36 CVEs |
before 3.10.24-2.mga3 | 3.10.24-2.mga3 |
kernel-rtMageia:3 From an advisory covering 36 CVEs |
before 3.10.24-0.rt20.2.mga3 | 3.10.24-0.rt20.2.mga3 |
kernel-vserverMageia:3 From an advisory covering 36 CVEs |
before 3.10.24-2.mga3 | 3.10.24-2.mga3 |
kernel-rtRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-debugRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-debug-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-debug-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-debuginfo-common-x86_64Red Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-docRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-firmwareRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-traceRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-trace-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-trace-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-vanillaRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-vanilla-debuginfoRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-rt-vanilla-develRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
mrg-rt-releaseRed Hat:enterprise_mrg:2:server:el6 From an advisory covering 12 CVEs |
before 0:3.8.13-rt14.25.el6rt | 0:3.8.13-rt14.25.el6rt |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernelRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-abi-whitelistsRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 16 CVEs |
before 0:2.6.32-431.el6 | 0:2.6.32-431.el6 |
kernelRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debugRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debug-debuginfoRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debug-develRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfoRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-develRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-docRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-firmwareRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
perfRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
perf-debuginfoRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
python-perf-debuginfoRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
python-perfRed Hat:rhel_eus:6.4::computenode From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernelRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-bootwrapperRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debugRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debug-debuginfoRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debug-develRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfoRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfo-common-i686Red Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfo-common-s390xRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-develRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-docRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-firmwareRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-kdumpRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-kdump-debuginfoRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
kernel-kdump-develRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
perfRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
perf-debuginfoRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
python-perf-debuginfoRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
python-perfRed Hat:rhel_eus:6.4::server From an advisory covering 7 CVEs |
before 0:2.6.32-358.37.1.el6 | 0:2.6.32-358.37.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4387 is a medium vulnerability (CVSS 6.1) in Linux Kernel, published October 10, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.58%, the 85th percentile. Fixed in linux 3.11.5-1.
References
ubuntu.com/usn/USN-2024-1
bugzilla.redhat.com/show_bug.cgi?id=1011927
github.com/torvalds/linux/commit/2811ebac2521ceac84f2bdae402455baa6a7fb47
rhn.redhat.com/errata/RHSA-2013-1490.html
Show 194 moreShow less
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2811ebac2521ceac84f2bdae402455baa6a7fb47
openwall.com/lists/oss-security/2013/09/29/1
nvd.nist.gov/vuln/detail/CVE-2013-4387
access.redhat.com/errata/RHSA-2013:1490
security-tracker.debian.org/tracker/CVE-2013-4387
advisories.mageia.org/MGASA-2013-0342.html
bugs.mageia.org/show_bug.cgi?id=11468
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.53
kernelnewbies.org/Linux_3.9
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1490.json
cve.org/CVERecord?id=CVE-2013-0343
ubuntu.com/security/CVE-2013-4387
Left out here: 33 references and the rest of 10 source descriptions. The JSON record has them.