The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fs_visitor::remove_dead_constants function. NOTE: this issue might be related to CVE-2013-0796.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mesa-libOSMesa-develUpgrade mesa-libGLUUpgrade mesa-libGLUpgrade mesa-libOSMesaUpgrade glx-utilsUpgrade mesa-libGL-develUpgrade mesa-dri-driversUpgrade mesa-demosUpgrade mesa-libGLU-develUpgrade mesa-dri-filesystem | Dec 1, 2016 | Aug 19, 2013 |
| Debian | — | Upgrade mesa | Jul 30, 2024 | Aug 19, 2013 |
| Gentoo Linux | — | Upgrade media-libs/mesa. | Oct 30, 2017 | Aug 19, 2013 |
| Oracle_linux | — | Upgrade mesa-demosUpgrade glx-utilsUpgrade mesa-libOSMesa-develUpgrade mesa-libGL-develUpgrade mesa-dri-driversUpgrade mesa-dri-filesystemUpgrade mesa-libGLUUpgrade mesa-libGLU-develUpgrade mesa-libOSMesaUpgrade mesa-libGL | Oct 16, 2024 | Aug 19, 2013 |
| Suse | — | Upgrade libgbm1Upgrade Mesa-libGLESv2-devel-32bitUpgrade libvdpau_r300Upgrade sle-sdk-releaseUpgrade Mesa-libEGL-develUpgrade libXvMC_nouveau-32bitUpgrade Mesa-libglapi-develUpgrade libvdpau_r600-32bitUpgrade Mesa-devel-32bitUpgrade Mesa-x86Upgrade Mesa-libGLESv1_CM1Upgrade libvdpau_r600Upgrade libxatracker-develUpgrade libXvMC_r300Upgrade Mesa-libGLU-develUpgrade libvdpau_nouveau-32bitUpgrade Mesa-libEGL1-32bitUpgrade Mesa-libIndirectGL1Upgrade libOSMesa8Upgrade libgbm-devel-32bitUpgrade Mesa-libIndirectGL-devel-32bitUpgrade Mesa-libGLESv1_CM-devel-32bitUpgrade Mesa-32bitUpgrade Mesa-libGLESv1_CM-develUpgrade libvdpau_r300-32bitUpgrade Mesa-libGLESv2-develUpgrade libOSMesa9Upgrade libvdpau_softpipeUpgrade libgbm1-32bitUpgrade libXvMC_softpipe-32bitUpgrade Mesa-libGLU-devel-32bitUpgrade Mesa-libGLESv2-2Upgrade libOSMesa-devel-32bitUpgrade libvdpau_nouveauUpgrade Mesa-libGLESv1_CM1-32bitUpgrade Mesa-libEGL-devel-32bitUpgrade libXvMC_r300-32bitUpgrade Mesa-libGL1-32bitUpgrade libxatracker1Upgrade Mesa-libGL1Upgrade Mesa-libIndirectGL-develUpgrade libOSMesa-develUpgrade libgbm-develUpgrade Mesa-libGLU1Upgrade MesaUpgrade libOSMesa9-32bitUpgrade Mesa-libGLU1-32bitUpgrade libXvMC_r600Upgrade Mesa-libGL-develUpgrade Mesa-libIndirectGL1-32bitUpgrade Mesa-libglapi-devel-32bitUpgrade Mesa-libGL-devel-32bitUpgrade libXvMC_nouveauUpgrade Mesa-develUpgrade Mesa-libglapi0-32bitUpgrade Mesa-libGLESv2-2-32bitUpgrade Mesa-libEGL1Upgrade libOSMesa8-32bitUpgrade libXvMC_softpipeUpgrade libXvMC_r600-32bitUpgrade Mesa-libglapi0Upgrade libvdpau_softpipe-32bit | Feb 17, 2015 | Aug 19, 2013 |
| Ubuntu | — | Upgrade libxatracker1-lts-quantalUpgrade libgl1-mesa-swx11Upgrade libxatracker1Upgrade libgl1-mesa-glxUpgrade libgles2-mesaUpgrade libgbm1Upgrade libosmesa6Upgrade libgl1-mesa-driUpgrade libopenvg1-mesaUpgrade libgl1-mesa-dri-lts-quantalUpgrade libglu1-mesaUpgrade libopenvg1-mesa-lts-quantalUpgrade libglapi-mesaUpgrade libgles1-mesaUpgrade libgles2-mesa-lts-quantalUpgrade libgl1-mesa-glx-lts-quantalUpgrade libegl1-mesa-lts-quantalUpgrade libglapi-mesa-lts-quantalUpgrade libegl1-mesaUpgrade libgles1-mesa-lts-quantalUpgrade libgbm1-lts-quantal | Nov 8, 2024 | Aug 19, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub