CVE-2013-6644: debian debian_linux Use After Free

Modified

Published 16-01-2014Last modified 06-08-2024

Vulnerability summary

CVE-2013-6644 is a high (CVSS 7.5) Use After Free vulnerability in debian debian_linux. EPSS estimates a 1.80% chance of exploitation in the next 30 days, higher than 78.5% of scored vulnerabilities. 17 public exploits are recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

1.80%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits17reference

Advisory lineage

Upstream 0 · Downstream 4 · Related 2

DSA-2862-1 MGASA-2014-0037 OPENSUSE-SU-2024:10171-1 OPENSUSE-SU-2024:12948-1

Timeline

16-01-2014
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

1.80%

Chance of exploitation in the next 30 days

Percentile

79%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.80% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

17 found

referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown

Show all 17 exploits

referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown
referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Debian1 product

debian_linuxEOL7.0 | 8.0

Google1 product

chrome< 32.0.1700.77 | < 32.0.1700.76

Opensuse1 product

opensuseEOL12.3 | 13.1

3 vendors · 3 products

References

22 links

code.google.com/p/chromium/issues/detail?id=317423X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=313743X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=317284X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=316298X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=322195X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=317485X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=269837X Refsource CONFIRMExploitMailing ListVendor Advisory
lists.opensuse.org/opensuse-security-announce/2014-02/msg00008.htmlVendor AdvisoryX Refsource SUSEBroken LinkMailing ListThird Party Advisory
code.google.com/p/chromium/issues/detail?id=320344X Refsource CONFIRMExploitMailing ListVendor Advisory
googlechromereleases.blogspot.com/2014/01/stable-channel-update.htmlX Refsource CONFIRMRelease NotesVendor Advisory

Show all 22 references

code.google.com/p/chromium/issues/detail?id=304547X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=327729X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=322662X Refsource CONFIRMMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=317097X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=319477X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=333036X Refsource CONFIRMBroken LinkMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=328456X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=318791X Refsource CONFIRMExploitMailing ListVendor Advisory
www.debian.org/security/2014/dsa-2862Vendor AdvisoryX Refsource DEBIANThird Party Advisory
code.google.com/p/chromium/issues/detail?id=314402X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=280352X Refsource CONFIRMExploitMailing ListVendor Advisory
code.google.com/p/chromium/issues/detail?id=324321X Refsource CONFIRMExploitMailing ListVendor Advisory