CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4254

The validate_event function in arch/arm/kernel/perf_event.c in the Linux kernel before 3.10.8 on the ARM platform allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by adding a hardware event to an event group led by a software event.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 18.0%

CVSS Severity

CVSS v2 Score 6.9

References

Products affected by CVE-2013-4254

Linux » Linux Kernel » Version: Any

cpe:2.3:o:linux:linux_kernel:*
Linux » Linux Kernel » Version: 3.10.0

cpe:2.3:o:linux:linux_kernel:3.10.0
Linux » Linux Kernel » Version: 3.10.1

cpe:2.3:o:linux:linux_kernel:3.10.1
Linux » Linux Kernel » Version: 3.10.2

cpe:2.3:o:linux:linux_kernel:3.10.2
Linux » Linux Kernel » Version: 3.10.3

cpe:2.3:o:linux:linux_kernel:3.10.3
Linux » Linux Kernel » Version: 3.10.4

cpe:2.3:o:linux:linux_kernel:3.10.4
Linux » Linux Kernel » Version: 3.10.5

cpe:2.3:o:linux:linux_kernel:3.10.5
Linux » Linux Kernel » Version: 3.10.6

cpe:2.3:o:linux:linux_kernel:3.10.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-4254

Products

Pricing

Contact Us