The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d graphics that trigger an out-of-bounds array access, related to the fs_visitor::remove_dead_constants function. NOTE: this issue might be related to CVE-2013-0796.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mesa-dri-driversUpgrade mesa-demosUpgrade mesa-libGLU-develUpgrade mesa-dri-filesystemUpgrade mesa-libGLUpgrade mesa-libOSMesaUpgrade glx-utilsUpgrade mesa-libGLUUpgrade mesa-libOSMesa-develUpgrade mesa-libGL-devel | Dec 1, 2016 | Aug 19, 2013 |
| Debian | — | Upgrade mesa | Jul 30, 2024 | Aug 19, 2013 |
| Gentoo Linux | — | Upgrade media-libs/mesa. | Oct 30, 2017 | Aug 19, 2013 |
| Oracle_linux | — | Upgrade mesa-libOSMesa-develUpgrade mesa-dri-driversUpgrade mesa-libGL-develUpgrade glx-utilsUpgrade mesa-demosUpgrade mesa-libGLUpgrade mesa-libOSMesaUpgrade mesa-libGLUUpgrade mesa-libGLU-develUpgrade mesa-dri-filesystem | Oct 16, 2024 | Aug 19, 2013 |
| Suse | — | Upgrade Mesa-libglapi0Upgrade Mesa-libGL-develUpgrade libxatracker1Upgrade Mesa-libglapi-devel-32bitUpgrade libXvMC_softpipeUpgrade libvdpau_softpipe-32bitUpgrade Mesa-libGL-devel-32bitUpgrade Mesa-libIndirectGL-develUpgrade Mesa-libGL1-32bitUpgrade Mesa-libglapi0-32bitUpgrade Mesa-libGLU1Upgrade Mesa-libIndirectGL1-32bitUpgrade libXvMC_r600Upgrade libXvMC_r300-32bitUpgrade Mesa-libEGL-devel-32bitUpgrade libXvMC_nouveauUpgrade Mesa-libEGL1Upgrade MesaUpgrade Mesa-libGLESv2-2-32bitUpgrade libXvMC_r600-32bitUpgrade libOSMesa8-32bitUpgrade Mesa-libGL1Upgrade Mesa-develUpgrade Mesa-libGLU1-32bitUpgrade libOSMesa9-32bitUpgrade libgbm-develUpgrade libOSMesa-develUpgrade Mesa-libEGL1-32bitUpgrade libgbm1-32bitUpgrade Mesa-libIndirectGL-devel-32bitUpgrade Mesa-libGLU-devel-32bitUpgrade sle-sdk-releaseUpgrade libOSMesa9Upgrade libvdpau_softpipeUpgrade libvdpau_r300Upgrade libOSMesa8Upgrade libOSMesa-devel-32bitUpgrade libvdpau_r600-32bitUpgrade libgbm-devel-32bitUpgrade libXvMC_nouveau-32bitUpgrade Mesa-libGLESv1_CM-devel-32bitUpgrade Mesa-libEGL-develUpgrade libXvMC_softpipe-32bitUpgrade Mesa-libGLESv1_CM-develUpgrade libxatracker-develUpgrade libvdpau_nouveauUpgrade libvdpau_r300-32bitUpgrade Mesa-libGLU-develUpgrade libvdpau_nouveau-32bitUpgrade libvdpau_r600Upgrade Mesa-libGLESv2-devel-32bitUpgrade Mesa-libGLESv1_CM1-32bitUpgrade Mesa-libGLESv2-2Upgrade Mesa-libIndirectGL1Upgrade libgbm1Upgrade Mesa-devel-32bitUpgrade Mesa-libglapi-develUpgrade Mesa-x86Upgrade Mesa-32bitUpgrade libXvMC_r300Upgrade Mesa-libGLESv1_CM1Upgrade Mesa-libGLESv2-devel | Feb 17, 2015 | Aug 19, 2013 |
| Ubuntu | — | Upgrade libxatracker1-lts-quantalUpgrade libgbm1Upgrade libgl1-mesa-driUpgrade libopenvg1-mesaUpgrade libosmesa6Upgrade libgl1-mesa-glxUpgrade libxatracker1Upgrade libgl1-mesa-swx11Upgrade libgles2-mesaUpgrade libglu1-mesaUpgrade libgl1-mesa-glx-lts-quantalUpgrade libegl1-mesa-lts-quantalUpgrade libgbm1-lts-quantalUpgrade libgl1-mesa-dri-lts-quantalUpgrade libgles2-mesa-lts-quantalUpgrade libgles1-mesaUpgrade libegl1-mesaUpgrade libglapi-mesa-lts-quantalUpgrade libgles1-mesa-lts-quantalUpgrade libopenvg1-mesa-lts-quantalUpgrade libglapi-mesa | Nov 8, 2024 | Aug 19, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub