Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID.
Publish Date : 2013-09-16 Last Update Date : 2014-01-04
Title |
Definition Id |
Class |
Family |
DEPRECATED: ELSA-2014-0433 -- kernel security, bug fix, and enhancement update (moderate) |
oval:org.mitre.oval:def:26844 |
|
unix |
DSA-2766-1 linux-2.6 - several |
oval:org.mitre.oval:def:19806 |
|
unix |
ELSA-2013-1645 -- Oracle Linux 6 kernel update (important) |
oval:org.mitre.oval:def:27264 |
|
unix |
ELSA-2013-2583 -- Unbreakable Enterprise Kernel security update (important) |
oval:org.mitre.oval:def:27338 |
|
unix |
ELSA-2013-2584 -- Unbreakable Enterprise Kernel security update (important) |
oval:org.mitre.oval:def:27431 |
|
unix |
ELSA-2013-2585 -- Unbreakable Enterprise Kernel security update (important) |
oval:org.mitre.oval:def:27358 |
|
unix |
ELSA-2014-0433-1 -- kernel security, bug fix, and enhancement update (moderate) |
oval:org.mitre.oval:def:27296 |
|
unix |
ELSA-2014:0433: kernel security, bug fix, and enhancement update (Moderate) |
oval:org.mitre.oval:def:24604 |
|
unix |
RHSA-2013:1645: Red Hat Enterprise Linux 6 kernel update (Important) |
oval:com.redhat.rhsa:def:20131645 |
|
unix |
RHSA-2013:1645: Red Hat Enterprise Linux 6 kernel update (Important) |
oval:org.mitre.oval:def:26083 |
|
unix |
RHSA-2014:0433: kernel security, bug fix, and enhancement update (Moderate) |
oval:com.redhat.rhsa:def:20140433 |
|
unix |
RHSA-2014:0433: kernel security, bug fix, and enhancement update (Moderate) |
oval:org.mitre.oval:def:24575 |
|
unix |
SUSE-SU-2014:0287-1 -- Security update for Linux kernel |
oval:org.mitre.oval:def:24665 |
|
unix |
SUSE-SU-2014:0536-1 -- Security update for Linux kernel |
oval:org.mitre.oval:def:24982 |
|
unix |
SUSE-SU-2014:0832-1 -- Security update for Linux Kernel |
oval:org.mitre.oval:def:26156 |
|
unix |
|
OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify
a vulnerability or a missing patch. Check out the OVAL definitions
if you want to learn what you should do to verify a vulnerability.