Denial of Service Vulnerability in Linux Package: CVE-2013-2893
Summary
DEBIAN-CVE-2013-2893: The Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF is enabled, allows physically proximate attackers to cause a denial of ser... Affects linux versions < 3.11.5-1. Fixed in 3.11.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and software resources. It serves as the foundation for various applications and services, ensuring system stability and performance. The package is known for its robustness and flexibility, but it is also susceptible to vulnerabilities that can compromise system security.
Vulnerability Detail
CVE-2013-2893 is a vulnerability in the Human Interface Device (HID) subsystem of the Linux kernel, affecting versions up to 3.11. It arises when specific configurations (CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF) are enabled, allowing physically proximate attackers to exploit a heap-based out-of-bounds write via a crafted device. This can lead to a denial of service, potentially causing system crashes or instability.
How To Fix
Minimum fixed version
3.11.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider disabling the affected configurations (CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, CONFIG_LOGIWHEELS_FF) in the kernel settings if they are not essential for your operations. This can help mitigate the risk until the package is updated.
Conclusion
CVE-2013-2893 is a significant vulnerability in the Linux kernel that can lead to denial of service. It is crucial for users to update their systems to the patched version to ensure security and stability. Utilizing tools like Vulert can help in monitoring vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2013-2893 is a vulnerability in the Linux kernel that allows attackers to cause a denial of service through a crafted Human Interface Device.
The vulnerability affects Linux kernel versions up to 3.11.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
The primary risk is a denial of service, which can lead to system crashes and instability, affecting the overall performance of your system.
Yes, a patch is available in version 3.11.5-1 of the Linux package. Updating to this version will resolve the vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
