NetSight
IP …
medium6.9

CVE-2013-1860

Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attacker…

Impact

Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a crafted cdc-wdm USB device.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.0.70
from 3.1 before 3.2.41
from 3.3 before 3.4.37
from 3.5 before 3.8.4
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10

Weakness classification

CWE-119

References