kernel-packages team mailing list archive

Thread
Date
[Bug 1279982] Re: CVE-2013-4736

To: kernel-packages@xxxxxxxxxxxxxxxxxxx
From: John Johansen <john.johansen@xxxxxxxxxxxxx>
Date: Thu, 13 Feb 2014 21:24:57 -0000
Reply-to: Bug 1279982 <1279982@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
CVE-2013-4736

** Also affects: linux (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Saucy)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Saucy)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Saucy)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Saucy)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Saucy)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Saucy)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Saucy)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Quantal)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Quantal)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Quantal)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Quantal)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Quantal)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Quantal)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Quantal)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Changed in: linux-armadaxp (Ubuntu Saucy)
       Status: New => Invalid

** Changed in: linux-armadaxp (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-armadaxp (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Saucy)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Quantal)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Saucy)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Quantal)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Saucy)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Quantal)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Saucy)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Quantal)
       Status: New => Invalid

** Changed in: linux-ti-omap4 (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-ti-omap4 (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Saucy)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Quantal)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Saucy)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Quantal)
       Status: New => Invalid

** Description changed:

- Placeholder
+ Multiple integer overflows in the JPEG engine drivers in the MSM camera
+ driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center
+ (QuIC) Android contributions for MSM devices and other products, allow
+ attackers to cause a denial of service (system crash) via a large number
+ of commands in an ioctl call, related to (1)
+ camera_v1/gemini/msm_gemini_sync.c, (2)
+ camera_v2/gemini/msm_gemini_sync.c, (3)
+ camera_v2/jpeg_10/msm_jpeg_sync.c, (4) gemini/msm_gemini_sync.c, (5)
+ jpeg_10/msm_jpeg_sync.c, and (6) mercury/msm_mercury_sync.c.

** Changed in: linux-armadaxp (Ubuntu Precise)
   Importance: Undecided => Low

** Changed in: linux-armadaxp (Ubuntu Saucy)
   Importance: Undecided => Low

** Changed in: linux-armadaxp (Ubuntu Lucid)
   Importance: Undecided => Low

** Changed in: linux-armadaxp (Ubuntu Trusty)
   Importance: Undecided => Low

** Changed in: linux-armadaxp (Ubuntu Quantal)
   Importance: Undecided => Low

** Changed in: linux-ec2 (Ubuntu Precise)
   Importance: Undecided => Low

** Changed in: linux-ec2 (Ubuntu Saucy)
   Importance: Undecided => Low

** Changed in: linux-ec2 (Ubuntu Lucid)
   Importance: Undecided => Low

** Changed in: linux-ec2 (Ubuntu Trusty)
   Importance: Undecided => Low

** Changed in: linux-ec2 (Ubuntu Quantal)
   Importance: Undecided => Low

** Changed in: linux-lts-quantal (Ubuntu Precise)
   Importance: Undecided => Low

** Changed in: linux-lts-quantal (Ubuntu Saucy)
   Importance: Undecided => Low

** Changed in: linux-lts-quantal (Ubuntu Lucid)
   Importance: Undecided => Low

** Changed in: linux-lts-quantal (Ubuntu Trusty)
   Importance: Undecided => Low

** Changed in: linux-lts-quantal (Ubuntu Quantal)
   Importance: Undecided => Low

** Changed in: linux-mvl-dove (Ubuntu Precise)
   Importance: Undecided => Low

** Changed in: linux-mvl-dove (Ubuntu Saucy)
   Importance: Undecided => Low

** Changed in: linux-mvl-dove (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Lucid)
   Importance: Undecided => Low

** Changed in: linux-mvl-dove (Ubuntu Trusty)
   Importance: Undecided => Low

** Changed in: linux-mvl-dove (Ubuntu Quantal)
   Importance: Undecided => Low

** Changed in: linux-lts-saucy (Ubuntu Precise)
   Importance: Undecided => Low

** Changed in: linux-lts-saucy (Ubuntu Saucy)
   Importance: Undecided => Low

** Changed in: linux-lts-saucy (Ubuntu Lucid)
   Importance: Undecided => Low

** Changed in: linux-lts-saucy (Ubuntu Trusty)
   Importance: Undecided => Low

** Changed in: linux-lts-saucy (Ubuntu Quantal)
   Importance: Undecided => Low

** Changed in: linux (Ubuntu Precise)
   Importance: Undecided => Low

** Changed in: linux (Ubuntu Saucy)
   Importance: Undecided => Low

** Changed in: linux (Ubuntu Lucid)
   Importance: Undecided => Low

** Changed in: linux (Ubuntu Trusty)
   Importance: Undecided => Low

** Changed in: linux (Ubuntu Quantal)
   Importance: Undecided => Low

** Changed in: linux-ti-omap4 (Ubuntu Precise)
   Importance: Undecided => Low

** Changed in: linux-ti-omap4 (Ubuntu Saucy)
   Importance: Undecided => Low

** Changed in: linux-ti-omap4 (Ubuntu Lucid)
   Importance: Undecided => Low

** Changed in: linux-ti-omap4 (Ubuntu Trusty)
   Importance: Undecided => Low

** Changed in: linux-ti-omap4 (Ubuntu Quantal)
   Importance: Undecided => Low

** Changed in: linux-fsl-imx51 (Ubuntu Precise)
   Importance: Undecided => Low

** Changed in: linux-fsl-imx51 (Ubuntu Saucy)
   Importance: Undecided => Low

** Changed in: linux-fsl-imx51 (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Lucid)
   Importance: Undecided => Low

** Changed in: linux-fsl-imx51 (Ubuntu Trusty)
   Importance: Undecided => Low

** Changed in: linux-fsl-imx51 (Ubuntu Quantal)
   Importance: Undecided => Low

** Changed in: linux-lts-raring (Ubuntu Precise)
   Importance: Undecided => Low

** Changed in: linux-lts-raring (Ubuntu Saucy)
   Importance: Undecided => Low

** Changed in: linux-lts-raring (Ubuntu Lucid)
   Importance: Undecided => Low

** Changed in: linux-lts-raring (Ubuntu Trusty)
   Importance: Undecided => Low

** Changed in: linux-lts-raring (Ubuntu Quantal)
   Importance: Undecided => Low

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1279982

Title:
  CVE-2013-4736

Status in “linux” package in Ubuntu:
  New
Status in “linux-armadaxp” package in Ubuntu:
  Invalid
Status in “linux-ec2” package in Ubuntu:
  Invalid
Status in “linux-fsl-imx51” package in Ubuntu:
  Invalid
Status in “linux-lts-backport-maverick” package in Ubuntu:
  New
Status in “linux-lts-backport-natty” package in Ubuntu:
  New
Status in “linux-lts-quantal” package in Ubuntu:
  Invalid
Status in “linux-lts-raring” package in Ubuntu:
  Invalid
Status in “linux-lts-saucy” package in Ubuntu:
  Invalid
Status in “linux-mvl-dove” package in Ubuntu:
  Invalid
Status in “linux-ti-omap4” package in Ubuntu:
  Invalid
Status in “linux” source package in Lucid:
  New
Status in “linux-armadaxp” source package in Lucid:
  Invalid
Status in “linux-ec2” source package in Lucid:
  New
Status in “linux-fsl-imx51” source package in Lucid:
  Invalid
Status in “linux-lts-backport-maverick” source package in Lucid:
  New
Status in “linux-lts-backport-natty” source package in Lucid:
  New
Status in “linux-lts-quantal” source package in Lucid:
  Invalid
Status in “linux-lts-raring” source package in Lucid:
  Invalid
Status in “linux-lts-saucy” source package in Lucid:
  Invalid
Status in “linux-mvl-dove” source package in Lucid:
  Invalid
Status in “linux-ti-omap4” source package in Lucid:
  Invalid
Status in “linux” source package in Precise:
  New
Status in “linux-armadaxp” source package in Precise:
  New
Status in “linux-ec2” source package in Precise:
  Invalid
Status in “linux-fsl-imx51” source package in Precise:
  Invalid
Status in “linux-lts-backport-maverick” source package in Precise:
  New
Status in “linux-lts-backport-natty” source package in Precise:
  New
Status in “linux-lts-quantal” source package in Precise:
  New
Status in “linux-lts-raring” source package in Precise:
  New
Status in “linux-lts-saucy” source package in Precise:
  New
Status in “linux-mvl-dove” source package in Precise:
  Invalid
Status in “linux-ti-omap4” source package in Precise:
  New
Status in “linux” source package in Quantal:
  New
Status in “linux-armadaxp” source package in Quantal:
  New
Status in “linux-ec2” source package in Quantal:
  Invalid
Status in “linux-fsl-imx51” source package in Quantal:
  Invalid
Status in “linux-lts-backport-maverick” source package in Quantal:
  New
Status in “linux-lts-backport-natty” source package in Quantal:
  New
Status in “linux-lts-quantal” source package in Quantal:
  Invalid
Status in “linux-lts-raring” source package in Quantal:
  Invalid
Status in “linux-lts-saucy” source package in Quantal:
  Invalid
Status in “linux-mvl-dove” source package in Quantal:
  Invalid
Status in “linux-ti-omap4” source package in Quantal:
  New
Status in “linux” source package in Saucy:
  New
Status in “linux-armadaxp” source package in Saucy:
  Invalid
Status in “linux-ec2” source package in Saucy:
  Invalid
Status in “linux-fsl-imx51” source package in Saucy:
  Invalid
Status in “linux-lts-backport-maverick” source package in Saucy:
  New
Status in “linux-lts-backport-natty” source package in Saucy:
  New
Status in “linux-lts-quantal” source package in Saucy:
  Invalid
Status in “linux-lts-raring” source package in Saucy:
  Invalid
Status in “linux-lts-saucy” source package in Saucy:
  Invalid
Status in “linux-mvl-dove” source package in Saucy:
  Invalid
Status in “linux-ti-omap4” source package in Saucy:
  New
Status in “linux” source package in Trusty:
  New
Status in “linux-armadaxp” source package in Trusty:
  Invalid
Status in “linux-ec2” source package in Trusty:
  Invalid
Status in “linux-fsl-imx51” source package in Trusty:
  Invalid
Status in “linux-lts-backport-maverick” source package in Trusty:
  New
Status in “linux-lts-backport-natty” source package in Trusty:
  New
Status in “linux-lts-quantal” source package in Trusty:
  Invalid
Status in “linux-lts-raring” source package in Trusty:
  Invalid
Status in “linux-lts-saucy” source package in Trusty:
  Invalid
Status in “linux-mvl-dove” source package in Trusty:
  Invalid
Status in “linux-ti-omap4” source package in Trusty:
  Invalid

Bug description:
  Multiple integer overflows in the JPEG engine drivers in the MSM
  camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation
  Center (QuIC) Android contributions for MSM devices and other
  products, allow attackers to cause a denial of service (system crash)
  via a large number of commands in an ioctl call, related to (1)
  camera_v1/gemini/msm_gemini_sync.c, (2)
  camera_v2/gemini/msm_gemini_sync.c, (3)
  camera_v2/jpeg_10/msm_jpeg_sync.c, (4) gemini/msm_gemini_sync.c, (5)
  jpeg_10/msm_jpeg_sync.c, and (6) mercury/msm_mercury_sync.c.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1279982/+subscriptions
References

[Bug 1279982] [NEW] CVE-2013-4736
From: John Johansen, 2014-02-13