CVE-2013-7445

NameCVE-2013-7445
DescriptionThe Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
NVD severityhigh (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
linux (PTS)wheezy3.2.78-1vulnerable
wheezy (security)3.2.84-1vulnerable
jessie3.16.39-1vulnerable
jessie (security)3.16.36-1+deb8u2vulnerable
stretch4.9.6-3vulnerable
sid4.9.10-1vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
linuxsource(unstable)(unfixed)high
linux-2.6source(unstable)(unfixed)high

Notes

[jessie] - linux <no-dsa> (Minor issue, requires invasive changes)
https://bugzilla.kernel.org/show_bug.cgi?id=60533

Search for package or bug name: Reporting problems