SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2013-2888

Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via…

MEDIUM 6.2EPSS 0.46%

Does this matter?

Lower severity and a low EPSS score (0.46%). Track it; it rarely justifies an emergency change on its own.

Description

Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11 allow physically proximate attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted device that provides an invalid Report ID.

CVSS 2.0
6.2 MEDIUMAV:L/AC:H/Au:N/C:C/I:C/A:C
EPSS
0.46% probability · 39th percentile
CISA KEV
Not listed
Weakness
CWE-20
Affected
linux/linux kernel
Source
chrome-cve-admin@google.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.