CVE-2013-2597
EUVD-2013-253931.08.2014, 10:55
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| codeaurora | android-msm | 2.6.29 |
| codeaurora | android-msm | 3.2.54 |
| codeaurora | android-msm | 3.2.55 |
| codeaurora | android-msm | 3.2.56 |
| codeaurora | android-msm | 3.2.57 |
| codeaurora | android-msm | 3.2.58 |
| codeaurora | android-msm | 3.2.59 |
| codeaurora | android-msm | 3.2.60 |
| codeaurora | android-msm | 3.2.61 |
| codeaurora | android-msm | 3.2.62 |
| codeaurora | android-msm | 3.4.72 |
| codeaurora | android-msm | 3.4.73 |
| codeaurora | android-msm | 3.4.74 |
| codeaurora | android-msm | 3.4.75 |
| codeaurora | android-msm | 3.4.76 |
| codeaurora | android-msm | 3.4.77 |
| codeaurora | android-msm | 3.4.78 |
| codeaurora | android-msm | 3.4.79 |
| codeaurora | android-msm | 3.4.80 |
| codeaurora | android-msm | 3.4.81 |
| codeaurora | android-msm | 3.4.82 |
| codeaurora | android-msm | 3.4.83 |
| codeaurora | android-msm | 3.4.84 |
| codeaurora | android-msm | 3.4.85 |
| codeaurora | android-msm | 3.4.86 |
| codeaurora | android-msm | 3.4.87 |
| codeaurora | android-msm | 3.4.88 |
| codeaurora | android-msm | 3.4.89 |
| codeaurora | android-msm | 3.4.90 |
| codeaurora | android-msm | 3.4.91 |
| codeaurora | android-msm | 3.4.92 |
| codeaurora | android-msm | 3.4.93 |
| codeaurora | android-msm | 3.4.94 |
| codeaurora | android-msm | 3.4.95 |
| codeaurora | android-msm | 3.4.96 |
| codeaurora | android-msm | 3.4.97 |
| codeaurora | android-msm | 3.4.98 |
| codeaurora | android-msm | 3.4.99 |
| codeaurora | android-msm | 3.4.100 |
| codeaurora | android-msm | 3.4.101 |
| codeaurora | android-msm | 3.4.102 |
| codeaurora | android-msm | 3.4.103 |
| codeaurora | android-msm | 3.10 |
| codeaurora | android-msm | 3.10.22 |
| codeaurora | android-msm | 3.10.23 |
| codeaurora | android-msm | 3.10.24 |
| codeaurora | android-msm | 3.10.25 |
| codeaurora | android-msm | 3.10.26 |
| codeaurora | android-msm | 3.10.27 |
| codeaurora | android-msm | 3.10.28 |
| codeaurora | android-msm | 3.10.29 |
| codeaurora | android-msm | 3.10.30 |
| codeaurora | android-msm | 3.10.31 |
| codeaurora | android-msm | 3.10.32 |
| codeaurora | android-msm | 3.10.33 |
| codeaurora | android-msm | 3.10.35 |
| codeaurora | android-msm | 3.10.36 |
| codeaurora | android-msm | 3.10.37 |
| codeaurora | android-msm | 3.10.38 |
| codeaurora | android-msm | 3.10.39 |
| codeaurora | android-msm | 3.10.40 |
| codeaurora | android-msm | 3.10.41 |
| codeaurora | android-msm | 3.10.42 |
| codeaurora | android-msm | 3.10.43 |
| codeaurora | android-msm | 3.10.44 |
| codeaurora | android-msm | 3.10.45 |
| codeaurora | android-msm | 3.10.46 |
| codeaurora | android-msm | 3.10.47 |
| codeaurora | android-msm | 3.10.48 |
| codeaurora | android-msm | 3.10.49 |
| codeaurora | android-msm | 3.10.50 |
| codeaurora | android-msm | 3.10.51 |
| codeaurora | android-msm | 3.10.52 |
| codeaurora | android-msm | 3.10.53 |
| codeaurora | android-msm | 3.12.3 |
| codeaurora | android-msm | 3.12.4 |
| codeaurora | android-msm | 3.12.5 |
| codeaurora | android-msm | 3.12.6 |
| codeaurora | android-msm | 3.12.7 |
| codeaurora | android-msm | 3.12.8 |
| codeaurora | android-msm | 3.12.9 |
| codeaurora | android-msm | 3.12.10 |
| codeaurora | android-msm | 3.12.11 |
| codeaurora | android-msm | 3.12.12 |
| codeaurora | android-msm | 3.12.13 |
| codeaurora | android-msm | 3.12.14 |
| codeaurora | android-msm | 3.12.15 |
| codeaurora | android-msm | 3.12.16 |
| codeaurora | android-msm | 3.12.17 |
| codeaurora | android-msm | 3.12.18 |
| codeaurora | android-msm | 3.12.19 |
| codeaurora | android-msm | 3.12.20 |
| codeaurora | android-msm | 3.12.21 |
| codeaurora | android-msm | 3.12.22 |
| codeaurora | android-msm | 3.12.23 |
| codeaurora | android-msm | 3.12.24 |
| codeaurora | android-msm | 3.12.25 |
| codeaurora | android-msm | 3.12.26 |
| codeaurora | android-msm | 3.13 |
| codeaurora | android-msm | 3.13:rc1 |
| codeaurora | android-msm | 3.13:rc2 |
| codeaurora | android-msm | 3.13:rc3 |
| codeaurora | android-msm | 3.13:rc4 |
| codeaurora | android-msm | 3.13:rc5 |
| codeaurora | android-msm | 3.13:rc6 |
| codeaurora | android-msm | 3.13:rc7 |
| codeaurora | android-msm | 3.13:rc8 |
| codeaurora | android-msm | 3.13.1 |
| codeaurora | android-msm | 3.13.2 |
| codeaurora | android-msm | 3.13.3 |
| codeaurora | android-msm | 3.13.4 |
| codeaurora | android-msm | 3.13.5 |
| codeaurora | android-msm | 3.13.6 |
| codeaurora | android-msm | 3.13.7 |
| codeaurora | android-msm | 3.13.8 |
| codeaurora | android-msm | 3.13.9 |
| codeaurora | android-msm | 3.13.10 |
| codeaurora | android-msm | 3.13.11 |
| codeaurora | android-msm | 3.14 |
| codeaurora | android-msm | 3.14:rc1 |
| codeaurora | android-msm | 3.14:rc2 |
| codeaurora | android-msm | 3.14:rc3 |
| codeaurora | android-msm | 3.14:rc4 |
| codeaurora | android-msm | 3.14:rc5 |
| codeaurora | android-msm | 3.14:rc6 |
| codeaurora | android-msm | 3.14:rc7 |
| codeaurora | android-msm | 3.14:rc8 |
| codeaurora | android-msm | 3.14.1 |
| codeaurora | android-msm | 3.14.2 |
| codeaurora | android-msm | 3.14.3 |
| codeaurora | android-msm | 3.14.4 |
| codeaurora | android-msm | 3.14.5 |
| codeaurora | android-msm | 3.14.6 |
| codeaurora | android-msm | 3.14.7 |
| codeaurora | android-msm | 3.14.8 |
| codeaurora | android-msm | 3.14.9 |
| codeaurora | android-msm | 3.14.10 |
| codeaurora | android-msm | 3.14.11 |
| codeaurora | android-msm | 3.14.12 |
| codeaurora | android-msm | 3.14.13 |
| codeaurora | android-msm | 3.14.14 |
| codeaurora | android-msm | 3.14.15 |
| codeaurora | android-msm | 3.14.16 |
| codeaurora | android-msm | 3.15 |
| codeaurora | android-msm | 3.15:rc1 |
| codeaurora | android-msm | 3.15:rc2 |
| codeaurora | android-msm | 3.15:rc3 |
| codeaurora | android-msm | 3.15:rc4 |
| codeaurora | android-msm | 3.15:rc5 |
| codeaurora | android-msm | 3.15:rc6 |
| codeaurora | android-msm | 3.15:rc7 |
| codeaurora | android-msm | 3.15:rc8 |
| codeaurora | android-msm | 3.15.1 |
| codeaurora | android-msm | 3.15.2 |
| codeaurora | android-msm | 3.15.3 |
| codeaurora | android-msm | 3.15.4 |
| codeaurora | android-msm | 3.15.5 |
| codeaurora | android-msm | 3.15.6 |
| codeaurora | android-msm | 3.15.7 |
| codeaurora | android-msm | 3.15.8 |
| codeaurora | android-msm | 3.15.9 |
| codeaurora | android-msm | 3.15.10 |
| codeaurora | android-msm | 3.16 |
| codeaurora | android-msm | 3.16:rc1 |
| codeaurora | android-msm | 3.16:rc2 |
| codeaurora | android-msm | 3.16:rc3 |
| codeaurora | android-msm | 3.16:rc4 |
| codeaurora | android-msm | 3.16:rc5 |
| codeaurora | android-msm | 3.16:rc6 |
| codeaurora | android-msm | 3.16:rc7 |
| codeaurora | android-msm | 3.16.1 |
| codeaurora | android-msm | 3.17:rc1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| linux |
| ||||||||||||
| linux-armadaxp |
| ||||||||||||
| linux-ec2 |
| ||||||||||||
| linux-flo |
| ||||||||||||
| linux-fsl-imx51 |
| ||||||||||||
| linux-goldfish |
| ||||||||||||
| linux-grouper |
| ||||||||||||
| linux-linaro-omap |
| ||||||||||||
| linux-linaro-shared |
| ||||||||||||
| linux-linaro-vexpress |
| ||||||||||||
| linux-lts-quantal |
| ||||||||||||
| linux-lts-raring |
| ||||||||||||
| linux-lts-saucy |
| ||||||||||||
| linux-lts-trusty |
| ||||||||||||
| linux-lts-utopic |
| ||||||||||||
| linux-lts-vivid |
| ||||||||||||
| linux-maguro |
| ||||||||||||
| linux-mako |
| ||||||||||||
| linux-manta |
| ||||||||||||
| linux-mvl-dove |
| ||||||||||||
| linux-qcm-msm |
| ||||||||||||
| linux-raspi2 |
| ||||||||||||
| linux-ti-omap4 |
|
Common Weakness Enumeration
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
- CWE-121 - Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
References