CVE-2013-2891

drivers/hid/hid-steelseries.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_STEELSERIES is enabled, allows physically proximate attackers to cause a denial of service (heap-based out-of-bounds write) via a crafted device.

Score

CVSS 2.0 4.7 Medium

Status

Modified - chrome-cve-admin@google.com

Published

2013-09-16

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Linux Kernel (Linux)

References

• http://marc.info/?l=linux-input&m=137772184614622&w=1
• http://openwall.com/lists/oss-security/2013/08/28/13