CVE-2013-4738

Published: 3 February 2014

Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges via (1) a crafted VIDIOC_MSM_VPE_DEQUEUE_STREAM_BUFF_INFO ioctl call, related to drivers/media/platform/msm/camera_v2/pproc/vpe/msm_vpe.c, or (2) a crafted VIDIOC_MSM_CPP_DEQUEUE_STREAM_BUFF_INFO ioctl call, related to drivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c.

Priority

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Not vulnerable (Android only)
	lucid	Not vulnerable (Android only)
	precise	Not vulnerable (Android only)
	quantal	Not vulnerable (Android only)
	raring	Not vulnerable (Android only)
	saucy	Not vulnerable (Android only)
	trusty	Not vulnerable (Android only)
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
	Patches: Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 Fixed by c9c81836ee44db9974007d34cf2aaeb1a51a8d45 Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 Fixed by 28385b9c3054c91dca1aa194ffa750550c50f3ce
linux-armadaxp Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Does not exist
	precise	Not vulnerable (Android only)
	quantal	Not vulnerable (Android only)
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
	This package is not directly supported by the Ubuntu Security Team
linux-aws Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Not vulnerable (Android only)
	trusty	Not vulnerable (Android only)
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-aws-hwe Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist
	upstream	Needed
	xenial	Not vulnerable (Android only)
linux-azure Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Not vulnerable (Android only)
	trusty	Not vulnerable (Android only)
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-azure-edge Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-ec2 Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Not vulnerable (Android only)
	precise	Does not exist
	quantal	Does not exist
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-euclid Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-flo Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist (trusty was ignored [abandoned])
	upstream	Not vulnerable (Android only)
	xenial	Ignored (abandoned)
linux-fsl-imx51 Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Ignored (end of life)
	precise	Does not exist
	quantal	Does not exist
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-gcp Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Not vulnerable (Android only)
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-gcp-edge Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Does not exist
	trusty	Does not exist
	upstream	Needed
	xenial	Does not exist
linux-gke Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Ignored (end of standard support)
linux-goldfish Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist (trusty was ignored [abandoned])
	upstream	Not vulnerable (Android only)
	xenial	Ignored (end of life)
linux-grouper Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist (trusty was ignored [abandoned])
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-hwe Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-hwe-edge Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-kvm Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Not vulnerable (Android only)
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-linaro-omap Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Does not exist
	precise	Ignored (end of life)
	quantal	Ignored (end of life)
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-linaro-shared Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Does not exist
	precise	Ignored (end of life)
	quantal	Ignored (end of life)
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-linaro-vexpress Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Does not exist
	precise	Ignored (end of life)
	quantal	Ignored (end of life)
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-lts-quantal Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Does not exist
	precise	Not vulnerable (Android only)
	quantal	Does not exist
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-lts-raring Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Does not exist
	precise	Not vulnerable (Android only)
	quantal	Does not exist
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-lts-trusty Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-lts-utopic Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist (trusty was ignored [end of standard support])
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-lts-vivid Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist (trusty was ignored [end of standard support])
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-lts-wily Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist (trusty was ignored [end of standard support])
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-lts-xenial Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Not vulnerable (Android only)
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-maguro Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist (trusty was ignored [abandoned])
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-mako Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist (trusty was ignored [abandoned])
	upstream	Not vulnerable (Android only)
	xenial	Ignored (abandoned)
linux-manta Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	trusty	Does not exist (trusty was ignored [abandoned])
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-mvl-dove Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Ignored (end of life)
	precise	Does not exist
	quantal	Does not exist
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-oem Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Not vulnerable (Android only)
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-qcm-msm Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Ignored (end of life)
	precise	Ignored (end of life)
	quantal	Ignored (end of life)
	raring	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist
linux-raspi2 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (Android only)
	cosmic	Not vulnerable (Android only)
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-snapdragon Launchpad, Ubuntu, Debian	bionic	Not vulnerable
	cosmic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Not vulnerable (Android only)
linux-ti-omap4 Launchpad, Ubuntu, Debian	bionic	Does not exist
	cosmic	Does not exist
	lucid	Does not exist
	precise	Not vulnerable (Android only)
	quantal	Not vulnerable (Android only)
	raring	Not vulnerable (Android only)
	saucy	Not vulnerable (Android only)
	trusty	Does not exist
	upstream	Not vulnerable (Android only)
	xenial	Does not exist

References

Bugs

https://launchpad.net/bugs/1244800

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›