Launchpad.net

CVE 2013-2595

The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, enables MSM_CAM_IOCTL_SET_MEM_MAP_INFO ioctl calls for an unrestricted mmap interface, which allows attackers to gain privileges via a crafted application.

Related bugs and status

CVE-2013-2595 (Candidate) is related to these bugs:

Bug #1364511: CVE-2013-2595

		In	Importance	Status
1364511	CVE-2013-2595	linux (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-mvl-dove (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-backport-maverick (Ubuntu)	Undecided	Invalid
1364511	CVE-2013-2595	linux-lts-backport-natty (Ubuntu)	Undecided	Invalid
1364511	CVE-2013-2595	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-ec2 (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Invalid
1364511	CVE-2013-2595	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Invalid
1364511	CVE-2013-2595	linux (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	Invalid
1364511	CVE-2013-2595	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	Invalid
1364511	CVE-2013-2595	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Invalid
1364511	CVE-2013-2595	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Invalid
1364511	CVE-2013-2595	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-ti-omap4 (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-backport-maverick (Ubuntu Lucid)	Undecided	Invalid
1364511	CVE-2013-2595	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Invalid
1364511	CVE-2013-2595	linux-armadaxp (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-armadaxp (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-saucy (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-saucy (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-quantal (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-quantal (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-raring (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-raring (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-trusty (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-trusty (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-trusty (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-goldfish (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-goldfish (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-goldfish (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-flo (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-flo (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-flo (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-raspi2 (Ubuntu)	Medium	New
1364511	CVE-2013-2595	linux-raspi2 (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-raspi2 (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-vivid (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-vivid (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-vivid (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-mako (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-mako (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-mako (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-utopic (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-utopic (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-utopic (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux-manta (Ubuntu)	Medium	Invalid
1364511	CVE-2013-2595	linux-manta (Ubuntu Precise)	Medium	Invalid
1364511	CVE-2013-2595	linux-manta (Ubuntu Trusty)	Medium	Invalid
1364511	CVE-2013-2595	linux (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-armadaxp (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-ec2 (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-flo (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-fsl-imx51 (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-goldfish (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-backport-maverick (Ubuntu Wily)	Undecided	New
1364511	CVE-2013-2595	linux-lts-backport-natty (Ubuntu Wily)	Undecided	New
1364511	CVE-2013-2595	linux-lts-quantal (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-raring (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-saucy (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-trusty (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-utopic (Ubuntu Wily)	Medium	Invalid
1364511	CVE-2013-2595	linux-lts-vivid (Ubuntu Wily)	Medium	Invalid

See the

CVE page on Mitre.org for more details.

References

CONFIRM: https://www.codeaurora...