PT-2013-6329 · Mesa+3 · Mesa+3

Published 1970-01-01 · Updated 2023-02-13 · CVE-2013-1872

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mesa versions 8.0.x through 9.0.x libvdpau r600-debuginfo (affected versions not specified) libvdpau r600-32bit (affected versions not specified) libXvMC r300-debuginfo (affected versions not specified) Mesa-libEGL1-debuginfo-32bit (affected versions not specified) libOSMesa8 (affected versions not specified) libXvMC r600-debuginfo (affected versions not specified) Mesa-libEGL-devel (affected versions not specified) Mesa-libglapi0-32bit (affected versions not specified) Mesa-libGLU1-debuginfo-32bit (affected versions not specified) mesa-libGLU-9.0 (affected versions not specified) libXvMC softpipe-debuginfo-32bit (affected versions not specified) Mesa-libglapi0-debuginfo (affected versions not specified) mesa-libGLU-devel-9.0 (affected versions not specified) Mesa-debuginfo-32bit (affected versions not specified) libXvMC r600-debuginfo-32bit (affected versions not specified) libOSMesa9-32bit (affected versions not specified) mesa-libGL-9.0 (affected versions not specified) mesa-libOSMesa-devel-9.0 (affected versions not specified) libgbm1-debuginfo-32bit (affected versions not specified) Mesa-libIndirectGL-devel (affected versions not specified) libvdpau r300-debuginfo (affected versions not specified) Mesa-debuginfo (affected versions not specified) Mesa-libGLESv2-devel-32bit (affected versions not specified) Mesa-libGLU-devel (affected versions not specified) Mesa-devel (affected versions not specified) libxatracker-devel (affected versions not specified) libXvMC nouveau-debuginfo (affected versions not specified) libgbm-devel (affected versions not specified) libxatracker1 (affected versions not specified) mesa-dri-filesystem-9.0 (affected versions not specified) mesa-libGL-devel-9.0 (affected versions not specified) Mesa-libGLU1 (affected versions not specified) Mesa-libGL-devel (affected versions not specified) libgbm-devel-32bit (affected versions not specified) mesa-libGL-devel-9.0 (affected versions not specified) Mesa-32bit (affected versions not specified) Mesa-libGLESv1 CM1-debuginfo (affected versions not specified) Mesa-libGLESv1 CM1-debuginfo-32bit (affected versions not specified) libvdpau r300-debuginfo-32bit (affected versions not specified) libXvMC r300-debuginfo-32bit (affected versions not specified) libXvMC r600 (affected versions not specified) libgbm1-debuginfo (affected versions not specified) libOSMesa9-debuginfo-32bit (affected versions not specified) libvdpau r300 (affected versions not specified) Mesa-libEGL1-32bit (affected versions not specified) mesa-demos-9.0 (affected versions not specified) libvdpau nouveau-debuginfo-32bit (affected versions not specified) Mesa-libIndirectGL1-32bit (affected versions not specified) mesa-debuginfo-9.0 (affected versions not specified) Mesa-libGL1-32bit (affected versions not specified) Mesa-libglapi-devel (affected versions not specified) libOSMesa-devel (affected versions not specified) libvdpau softpipe-debuginfo-32bit (affected versions not specified) Mesa-libGLESv1 CM-devel (affected versions not specified) mesa-demos-9.0 (affected versions not specified) libvdpau nouveau-debuginfo (affected versions not specified) Mesa-libGL-devel-32bit (affected versions not specified) libvdpau softpipe-debuginfo (affected versions not specified) mesa-libGLU-9.0 (affected versions not specified) Mesa-libglapi0 (affected versions not specified) mesa-libGLU-devel-9.0 (affected versions not specified) libXvMC nouveau (affected versions not specified) Mesa (affected versions not specified) Mesa-libEGL1-debuginfo (affected versions not specified) libXvMC r600-32bit (affected versions not specified) mesa-dri-drivers-9.0 (affected versions not specified) Mesa-libGLESv1 CM-devel-32bit (affected versions not specified) libXvMC softpipe (affected versions not specified) Mesa-libEGL-devel-32bit (affected versions not specified) libOSMesa-devel-32bit (affected versions not specified) Mesa-libIndirectGL1 (affected versions not specified) Mesa-libGL1 (affected versions not specified) Mesa-32bit (affected versions not specified) libXvMC r300 (affected versions not specified) Mesa-libGLU-devel-32bit (affected versions not specified) Mesa-libGLESv2-2 (affected versions not specified) libXvMC softpipe-32bit (affected versions not specified) libvdpau r600-debuginfo-32bit (affected versions not specified) Mesa-libIndirectGL-devel-32bit (affected versions not specified) libXvMC softpipe-debuginfo (affected versions not specified) Mesa-libGLESv2-2-debuginfo (affected versions not specified) libgbm1 (affected versions not specified) Mesa-libGLESv2-2-debuginfo-32bit (affected versions not specified) libOSMesa9-debuginfo (affected versions not specified) libOSMesa8-debuginfo (affected versions not specified) libvdpau nouveau (affected versions not specified) libvdpau r600 (affected versions not specified) Mesa-devel (affected versions not specified) mesa-libOSMesa-devel-9.0 (affected versions not specified) Mesa-libIndirectGL1-debuginfo (affected versions not specified) Mesa-libGLESv1 CM1-32bit (affected versions not specified) Mesa-libglapi0-debuginfo-32bit (affected versions not specified) libvdpau nouveau-32bit (affected versions not specified) Mesa-libGLESv2-2-32bit (affected versions not specified) Mesa-libGL1-debuginfo (affected versions not specified) libvdpau softpipe-32bit (affected versions not specified) Mesa-libGLESv2-devel (affected versions not specified) mesa-dri-filesystem-9.0 (affected versions not specified) libxatracker1-debuginfo (affected versions not specified) libXvMC r300-32bit (affected versions not specified) libXvMC nouveau-debuginfo-32bit (affected versions not specified) mesa-dri-drivers-9.0 (affected versions not specified) libgbm1-32bit (affected versions not specified) mesa-debuginfo-9.0 (affected versions not specified)

Description The vulnerability allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fs visitor::remove dead constants function. The vulnerability can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-01794

BDU:2015-04361

BDU:2015-04362

BDU:2015-04363

BDU:2015-04364

BDU:2015-05544

BDU:2015-05545

BDU:2015-05546

BDU:2015-05547

BDU:2015-05548

BDU:2015-05549

BDU:2015-05550

BDU:2015-05551

BDU:2015-05552

BDU:2015-05553

BDU:2015-05554

BDU:2015-05555

BDU:2015-05556

BDU:2015-05557

BDU:2015-05558

BDU:2015-05559

BDU:2015-05560

BDU:2015-05561

BDU:2015-05562

BDU:2015-05563

BDU:2015-05564

BDU:2015-05565

BDU:2015-05566

BDU:2015-05567

BDU:2015-05568

BDU:2015-05569

BDU:2015-05570

BDU:2015-05571

BDU:2015-05572

BDU:2015-05573

BDU:2015-05574

BDU:2015-05575

BDU:2015-05576

BDU:2015-05577

BDU:2015-05578

BDU:2015-05579

BDU:2015-05580

BDU:2015-05581

BDU:2015-05582

BDU:2015-05583

BDU:2015-05584

BDU:2015-05585

BDU:2015-05586

BDU:2015-05587

BDU:2015-05588

BDU:2015-05589

BDU:2015-05590

BDU:2015-05591

BDU:2015-05592

BDU:2015-05593

BDU:2015-05594

BDU:2015-05595

BDU:2015-05596

BDU:2015-05597

BDU:2015-05598

BDU:2015-05599

BDU:2015-05600

BDU:2015-05601

BDU:2015-05602

BDU:2015-05603

BDU:2015-05604

BDU:2015-05605

BDU:2015-05606

BDU:2015-05607

BDU:2015-05608

BDU:2015-05609

BDU:2015-05610

BDU:2015-05611

BDU:2015-05612

BDU:2015-05613

BDU:2015-05614

BDU:2015-05615

BDU:2015-05616

BDU:2015-05617

BDU:2015-05618

BDU:2015-05619

BDU:2015-05620

BDU:2015-05621

BDU:2015-05622

BDU:2015-05623

BDU:2015-05624

BDU:2015-05625

BDU:2015-05626

BDU:2015-05627

BDU:2015-05628

BDU:2015-05629

BDU:2015-05630

BDU:2015-05631

BDU:2015-05632

BDU:2015-05633

BDU:2015-05634

BDU:2015-05635

BDU:2015-05636

BDU:2015-05637

BDU:2015-05638

BDU:2015-05639

BDU:2015-05640

BDU:2015-05641

BDU:2015-05642

BDU:2015-05643

BDU:2015-06201

BDU:2015-06418

BDU:2015-06419

BDU:2015-06420

BDU:2015-06421

BDU:2015-06422

BDU:2015-06423

BDU:2015-06424

BDU:2015-06425

BDU:2015-06426

BDU:2015-06427

BDU:2015-08994

BDU:2015-08995

BDU:2015-08996

BDU:2015-08997

BDU:2015-08998

BDU:2015-08999

BDU:2015-09000

BDU:2015-09001

BDU:2015-09002

BDU:2015-09003

CESA-2013_0897

CVE-2013-1872

DSA-2704-1

MGASA-2013-0186

MGASA-2013-0190

OPENSUSE-SU-2013_1188-1

RHSA-2013:0897

RHSA-2013_0897

SUSE-SU-2013_1175-1

Affected Products

Centos

Mesa

Red Hat

Suse

References · 212

• https://advisories.mageia.org/MGASA-2013-0190.html · Security Note
• https://bdu.fstec.ru/vul/2015-05598 · Security Note
• https://bdu.fstec.ru/vul/2015-06419 · Security Note
• https://bdu.fstec.ru/vul/2015-05627 · Security Note
• https://bdu.fstec.ru/vul/2015-05557 · Security Note
• https://bdu.fstec.ru/vul/2015-05595 · Security Note
• https://osv.dev/vulnerability/MGASA-2013-0186 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09000 · Security Note
• https://bdu.fstec.ru/vul/2015-05558 · Security Note
• https://bdu.fstec.ru/vul/2015-05588 · Security Note
• https://bdu.fstec.ru/vul/2015-05608 · Security Note
• https://bdu.fstec.ru/vul/2015-09020 · Security Note
• https://bdu.fstec.ru/vul/2015-05611 · Security Note
• https://bdu.fstec.ru/vul/2015-05580 · Security Note
• https://bdu.fstec.ru/vul/2015-09015 · Security Note