CVE-2013-1773: linux linux_kernel
Vulnerability summary
CVE-2013-1773 is a medium (CVSS 6.2) vulnerability in linux linux_kernel. EPSS estimates a 1.04% chance of exploitation in the next 30 days, higher than 64% of scored vulnerabilities. 1 public exploit is recorded.
Not severe (CVSS 6.2, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 5Timeline
- 28-02-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversion.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.04%
Chance of exploitation in the next 30 days
Percentile
64%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.04% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
1 foundGoogle Android Kernel 2.6 - Local Denial of Service Crash (PoC)
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.
Ubuntu14 products
- linux< 3.11.0-12.19 | < 4.2.0-16.19
- linux-aws< 4.4.0-1002.2 | < 4.4.0-1001.10
- linux-flo< 3.4.0-1.3 | < 3.4.0-5.22
- linux-gke< 4.4.0-1003.3
- linux-goldfish< 3.4.0-1.9 | < 3.4.0-4.27
Redhat2 products
- enterprise_linuxEOL6.0
- enterprise_mrg2.0
Debian1 product
- linux< 3.2.15-1
Linux1 product
- linux_kernel≤ 3.3 | 3.0:rc1 | 3.0:rc2 | 3.0:rc3 | 3.0:rc4 | 3.0:rc5 | 3.0:rc6 | 3.0:rc7 | 3.0.1 | 3.0.2 | 3.0.3 | 3.0.4 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.0.10 | 3.0.11 | 3.0.12 | 3.0.13 | 3.0.14 | 3.0.15 | 3.0.16 | 3.0.17 | 3.0.18 | 3.0.19 | 3.0.20 | 3.0.21 | 3.0.22 | 3.0.23 | 3.0.24 | 3.0.25 | 3.0.26 | 3.0.27 | 3.0.28 | 3.0.29 | 3.0.30 | 3.0.31 | 3.0.32 | 3.0.33 | 3.0.34 | 3.0.35 | 3.0.36 | 3.0.37 | 3.0.38 | 3.0.39 | 3.0.40 | 3.0.41 | 3.0.42 | 3.0.43 | 3.0.44 | 3.1 | 3.1:rc1 | 3.1:rc2 | 3.1:rc3 | 3.1:rc4 | 3.11 | 3.12 | 3.13 | 3.14 | 3.15 | 3.16 | 3.17 | 3.18 | 3.19 | 3.1.10 | 3.2 | 3.2:rc2 | 3.2:rc3 | 3.2:rc4 | 3.2:rc5 | 3.2:rc6 | 3.2:rc7 | 3.2.1 | 3.2.2 | 3.2.3 | 3.2.4 | 3.2.5 | 3.2.6 | 3.2.7 | 3.2.8 | 3.2.9 | 3.2.10 | 3.2.11 | 3.2.12 | 3.2.13 | 3.2.14 | 3.2.15 | 3.2.16 | 3.2.17 | 3.2.18 | 3.2.19 | 3.2.20 | 3.2.21 | 3.2.22 | 3.2.23 | 3.2.24 | 3.2.25 | 3.2.26 | 3.2.27 | 3.2.28 | 3.2.29 | 3.2.30 | 3.3:rc1 | 3.3:rc2 | 3.3:rc3 | 3.3:rc4 | 3.3:rc5 | 3.3:rc6
4 vendors · 18 products
References
20 links- bugzilla.redhat.com/show_bug.cgi?id=916115X Refsource CONFIRM
- github.com/torvalds/linux/commit/0720a06a7518c9d0c0125bd5d1f3b6264c55c3ddX Refsource CONFIRM
- git.kernel.orgX Refsource CONFIRM
- www.kernel.org/pub/linux/kernel/v3.x/patch-3.3.bz2X Refsource CONFIRM