Launchpad.net

CVE 2013-2890

drivers/hid/hid-sony.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_SONY is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

Related bugs and status

CVE-2013-2890 (Candidate) is related to these bugs:

Bug #1220192: CVE-2013-2890

		In	Importance	Status
1220192	CVE-2013-2890	linux (Ubuntu)	Low	Invalid
1220192	CVE-2013-2890	linux-fsl-imx51 (Ubuntu)	Low	Invalid
1220192	CVE-2013-2890	linux-mvl-dove (Ubuntu)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-backport-maverick (Ubuntu)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-backport-natty (Ubuntu)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-ti-omap4 (Ubuntu)	Low	Invalid
1220192	CVE-2013-2890	linux-ec2 (Ubuntu)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-backport-maverick (Ubuntu Saucy)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-backport-natty (Ubuntu Saucy)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-backport-maverick (Ubuntu Raring)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-backport-natty (Ubuntu Raring)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-backport-maverick (Ubuntu Quantal)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-backport-natty (Ubuntu Quantal)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux (Ubuntu Precise)	Low	Invalid
1220192	CVE-2013-2890	linux-ec2 (Ubuntu Precise)	Low	Invalid
1220192	CVE-2013-2890	linux-fsl-imx51 (Ubuntu Precise)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-mvl-dove (Ubuntu Precise)	Low	Invalid
1220192	CVE-2013-2890	linux-ti-omap4 (Ubuntu Precise)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-backport-maverick (Ubuntu Lucid)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-armadaxp (Ubuntu)	Low	Invalid
1220192	CVE-2013-2890	linux-armadaxp (Ubuntu Precise)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-quantal (Ubuntu)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-quantal (Ubuntu Precise)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-raring (Ubuntu)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-raring (Ubuntu Precise)	Low	Won't Fix
1220192	CVE-2013-2890	linux-lts-trusty (Ubuntu)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-trusty (Ubuntu Precise)	Low	Invalid
1220192	CVE-2013-2890	linux (Ubuntu Trusty)	Low	Invalid
1220192	CVE-2013-2890	linux-armadaxp (Ubuntu Trusty)	Low	Invalid
1220192	CVE-2013-2890	linux-ec2 (Ubuntu Trusty)	Low	Invalid
1220192	CVE-2013-2890	linux-fsl-imx51 (Ubuntu Trusty)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	New
1220192	CVE-2013-2890	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	New
1220192	CVE-2013-2890	linux-lts-quantal (Ubuntu Trusty)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-raring (Ubuntu Trusty)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-trusty (Ubuntu Trusty)	Low	Invalid
1220192	CVE-2013-2890	linux-mvl-dove (Ubuntu Trusty)	Low	Invalid
1220192	CVE-2013-2890	linux-ti-omap4 (Ubuntu Trusty)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux (Ubuntu Vivid)	Low	Invalid
1220192	CVE-2013-2890	linux-armadaxp (Ubuntu Vivid)	Low	Invalid
1220192	CVE-2013-2890	linux-ec2 (Ubuntu Vivid)	Low	Invalid
1220192	CVE-2013-2890	linux-fsl-imx51 (Ubuntu Vivid)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-backport-maverick (Ubuntu Vivid)	Undecided	New
1220192	CVE-2013-2890	linux-lts-backport-natty (Ubuntu Vivid)	Undecided	New
1220192	CVE-2013-2890	linux-lts-quantal (Ubuntu Vivid)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-raring (Ubuntu Vivid)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-trusty (Ubuntu Vivid)	Low	Invalid
1220192	CVE-2013-2890	linux-mvl-dove (Ubuntu Vivid)	Low	Invalid
1220192	CVE-2013-2890	linux-ti-omap4 (Ubuntu Vivid)	Low	Invalid
1220192	CVE-2013-2890	linux (Ubuntu Wily)	Low	Invalid
1220192	CVE-2013-2890	linux-armadaxp (Ubuntu Wily)	Low	Invalid
1220192	CVE-2013-2890	linux-ec2 (Ubuntu Wily)	Low	Invalid
1220192	CVE-2013-2890	linux-fsl-imx51 (Ubuntu Wily)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-backport-maverick (Ubuntu Wily)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-backport-natty (Ubuntu Wily)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-quantal (Ubuntu Wily)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-raring (Ubuntu Wily)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-trusty (Ubuntu Wily)	Low	Invalid
1220192	CVE-2013-2890	linux-mvl-dove (Ubuntu Wily)	Low	Invalid
1220192	CVE-2013-2890	linux-ti-omap4 (Ubuntu Wily)	Low	Invalid
1220192	CVE-2013-2890	linux-goldfish (Ubuntu)	Low	Invalid
1220192	CVE-2013-2890	linux-goldfish (Ubuntu Precise)	Low	Invalid
1220192	CVE-2013-2890	linux-goldfish (Ubuntu Trusty)	Low	Invalid
1220192	CVE-2013-2890	linux-goldfish (Ubuntu Vivid)	Low	Invalid
1220192	CVE-2013-2890	linux-goldfish (Ubuntu Wily)	Low	Invalid
1220192	CVE-2013-2890	linux-lts-saucy (Ubuntu)	Undecided	New
1220192	CVE-2013-2890	linux-lts-saucy (Ubuntu Precise)	Undecided	Won't Fix
1220192	CVE-2013-2890	linux-lts-saucy (Ubuntu Trusty)	Undecided	New
1220192	CVE-2013-2890	linux-lts-saucy (Ubuntu Vivid)	Undecided	New
1220192	CVE-2013-2890	linux-lts-saucy (Ubuntu Wily)	Undecided	New

See the

CVE page on Mitre.org for more details.

References

MLIST: [oss-security] 2013082...
MLIST: [linux-input] 20130828...