National Cyber-Alert System

Vulnerability Summary for CVE-2007-3513

Overview

The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service (memory consumption).

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (10/18/2007)

This issue did not affect the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2007-2403

Type: Advisory; Patch Information

Hyperlink:http://www.frsirt.com/english/advisories/2007/2403

External Source: CONFIRM

Name: http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.22-rc7

Hyperlink:http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.22-rc7

External Source: XF

Name: kernel-lcdwrite-dos(35302)

Hyperlink:http://xforce.iss.net/xforce/xfdb/35302

External Source: UBUNTU

Name: USN-510-1

Hyperlink:http://www.ubuntu.com/usn/usn-510-1

External Source: UBUNTU

Name: USN-509-1

Hyperlink:http://www.ubuntu.com/usn/usn-509-1

External Source: UBUNTU

Name: USN-489-1

Hyperlink:http://www.ubuntu.com/usn/usn-489-1

External Source: BID

Name: 24734

Hyperlink:http://www.securityfocus.com/bid/24734

External Source: REDHAT

Name: RHSA-2007:0940

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0940.html

External Source: SUSE

Name: SUSE-SA:2007:053

Hyperlink:http://www.novell.com/linux/security/advisories/2007_53_kernel.html

External Source: SUSE

Name: SUSE-SA:2007:051

Hyperlink:http://www.novell.com/linux/security/advisories/2007_51_kernel.html

External Source: MANDRIVA

Name: MDKSA-2007:196

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:196

External Source: MANDRIVA

Name: MDKSA-2007:195

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:195

External Source: DEBIAN

Name: DSA-1356

Hyperlink:http://www.debian.org/security/2007/dsa-1356

External Source: SECUNIA

Name: 27322

Hyperlink:http://secunia.com/advisories/27322

External Source: SECUNIA

Name: 27227

Hyperlink:http://secunia.com/advisories/27227

External Source: SECUNIA

Name: 27212

Hyperlink:http://secunia.com/advisories/27212

External Source: SECUNIA

Name: 26664

Hyperlink:http://secunia.com/advisories/26664

External Source: SECUNIA

Name: 26643

Hyperlink:http://secunia.com/advisories/26643

External Source: SECUNIA

Name: 26450

Hyperlink:http://secunia.com/advisories/26450

External Source: SECUNIA

Name: 26139

Hyperlink:http://secunia.com/advisories/26139

External Source: SECUNIA

Name: 25895

Hyperlink:http://secunia.com/advisories/25895