Lucene search

K
cve[email protected]CVE-2013-1774
HistoryFeb 28, 2013 - 7:55 p.m.

CVE-2013-1774

2013-02-2819:55:00
CWE-264
web.nvd.nist.gov
78
cve-2013-1774
linux kernel
usb
serial converter
denial of service
null pointer dereference
system crash
nvd

5.1 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

9.4%

The chase_port function in drivers/usb/serial/io_ti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service (NULL pointer dereference and system crash) via an attempted /dev/ttyUSB read or write operation on a disconnected Edgeport USB serial converter.

References

5.1 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:H/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

9.4%