NVD

Id
38810  
Name
CVE-2013-2897  
Description
Multiple array index errors in drivers/hid/hid-multitouch.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_MULTITOUCH is enabled, allow physically proximate attackers to cause a denial of service (heap memory corruption, or NULL pointer dereference and OOPS) via a crafted device.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-09-16  
Modified Date
2016-12-30  
Seq
2013-2897  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
198875 38810 CVE-2013-2897 SUSE-SU-2015:0481  View
198876 38810 CVE-2013-2897 openSUSE-SU-2015:0566  View
198877 38810 CVE-2013-2897 [linux-input] 20130828 [PATCH 11/14] HID: multitouch: validate feature report details  View
198878 38810 CVE-2013-2897 [oss-security] 20130828 Linux HID security flaws  View
198879 38810 CVE-2013-2897 62044  View
198880 38810 CVE-2013-2897 USN-2019-1  View
198881 38810 CVE-2013-2897 USN-2020-1  View
198882 38810 CVE-2013-2897 USN-2021-1  View
198883 38810 CVE-2013-2897 USN-2022-1  View
198884 38810 CVE-2013-2897 USN-2023-1  View
198885 38810 CVE-2013-2897 USN-2024-1  View
198886 38810 CVE-2013-2897 USN-2038-1  View
198887 38810 CVE-2013-2897 USN-2039-1  View
198888 38810 CVE-2013-2897 USN-2050-1  View
198889 38810 CVE-2013-2897 https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.54  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22555 JVNDB-2013-004130 Linux Kernel の Human Interface Device サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の Human Interface Device (HID) サブシステムの drivers/hid/hid-multitouch.c には、CONFIG_HID_MULTITOUCH が有効になっている場合、配列のインデックスエラーにより、サービス運用妨害 (ヒープメモリ破損、または NULL ポインタデリファレンスおよび OOPS) 状態にされる脆弱性が存在します。 CVE-2013-2897 62839 CVE-2013-2897 38810 4.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004130.html 2013-08-28 2014-03-10 View