CVE-2013-2126: canonical ubuntu_linux Resource Management Errors
Vulnerability summary
CVE-2013-2126 is a high (CVSS 7.5) Resource Management Errors vulnerability in canonical ubuntu_linux. EPSS estimates a 4.50% chance of exploitation in the next 30 days, higher than 91.4% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 14-08-2013PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
Multiple double free vulnerabilities in the LibRaw::unpack function in libraw_cxx.cpp in LibRaw before 0.15.2 allow context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed full-color (1) Foveon or (2) sRAW image file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.50%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
-0.04 pp
From 4.53% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundLibraw
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Mageia4 products
- libkdcraw< 4.8.5-1.2.mga2
- libraw< 0.14.5-1.1.mga2
- darktable< 1.2-1.1.mga3
- libraw< 0.14.7-5.1.mga3
Debian3 products
- darktable< 1.2.1-2
- libkdcraw< 24.12.0-1
- libraw< 0.15.3-1
Canonical1 product
- ubuntu_linuxEOL12.04 | 12.10 | 13.04
Libraw1 product
- libraw≤ 0.15.1 | 0.15.0
Opensuse1 product
- opensuseEOL12.2 | 12.3
Ubuntu1 product
- darktable< 1.4-2
6 vendors · 11 products
References
25 links- github.com/LibRaw/LibRaw/commit/19ffddb0fe1a4ffdb459b797ffcf7f490d28b5a6X Refsource CONFIRMExploitPatch
Show all 25 references
- secunia.com/advisories/53547/Advisory
