Bug 923584 (CVE-2013-1872) - CVE-2013-1872 Mesa: Memory corruption (OOB read/write) on intel drivers
Summary: CVE-2013-1872 Mesa: Memory corruption (OOB read/write) on intel drivers
Status: CLOSED ERRATA
Alias: CVE-2013-1872
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard: impact=important,public=20130529,repo...
Keywords: Security
Depends On: 963063 963064 970010
Blocks: 923585
TreeView+ depends on / blocked
 
Reported: 2013-03-20 06:23 UTC by Huzaifa S. Sidhpurwala
Modified: 2015-07-13 07:38 UTC (History)
4 users (show)

(edit)
Clone Of:
(edit)
Last Closed: 2015-07-10 05:31:13 UTC


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2013:0897 normal SHIPPED_LIVE Important: mesa security update 2013-06-03 21:40:18 UTC

Description Huzaifa S. Sidhpurwala 2013-03-20 06:23:44 UTC
An Out-of-bounds memory read / write flaw was found in Mesa. A remote attacker could use this flaw to crash an application linked against or, potentially, execute arbitrary code via an application linked against Mesa graphics libraries.

References:

https://bugs.freedesktop.org/show_bug.cgi?id=59429
https://code.google.com/p/chromium/issues/detail?id=169054 (private)
https://bugzilla.mozilla.org/show_bug.cgi?id=827106 (private)

Comment 5 Huzaifa S. Sidhpurwala 2013-06-03 10:08:40 UTC
Created mesa tracking bugs for this issue

Affects: fedora-all [bug 970010]

Comment 6 errata-xmlrpc 2013-06-03 17:42:47 UTC
This issue has been addressed in following products:

  Red Hat Enterprise Linux 6

Via RHSA-2013:0897 https://rhn.redhat.com/errata/RHSA-2013-0897.html


Note You need to log in before you can comment on or make changes to this bug.