Sign-up

ID

VAR-201310-0472


CVE

CVE-2013-5192


TITLE

Apple Mac OS X of USB Service operation interruption in the hub controller (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2013-004853

DESCRIPTION

The USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a request with a crafted (1) port or (2) port number. Successfully exploiting this issue to trigger unexpected system termination causing denial-of-service conditions. Note: This issue was previously covered in BID 63282 (Apple Mac OS X APPLE-SA-2013-10-22-3 Multiple Security Vulnerabilities), but has been given its own record to better document it. OS X versions prior to 10.9 are vulnerable

Trust: 1.98

sources: NVD: CVE-2013-5192 // JVNDB: JVNDB-2013-004853 // BID: 63352 // VULHUB: VHN-65194

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:eqversion:10.8.4

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.8.5

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.8.1

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.8.0

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.8.2

Trust: 1.6

vendor:applemodel:mac os xscope:eqversion:10.8.3

Trust: 1.6

vendor:applemodel:mac os xscope:lteversion:10.8.5

Trust: 1.0

vendor:applemodel:mac os xscope:ltversion:10.9

Trust: 0.8

vendor:applemodel:mac osscope:eqversion:x10.8.5

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8.4

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8.2

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8.1

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8.3

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8

Trust: 0.3

vendor:applemodel:mac osscope:neversion:x10.9

Trust: 0.3

sources: BID: 63352 // JVNDB: JVNDB-2013-004853 // CNNVD: CNNVD-201310-603 // NVD: CVE-2013-5192

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-5192
value: MEDIUM

Trust: 1.0

NVD: CVE-2013-5192
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201310-603
value: MEDIUM

Trust: 0.6

VULHUB: VHN-65194
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2013-5192
severity: MEDIUM
baseScore: 4.9
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-65194
severity: MEDIUM
baseScore: 4.9
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-65194 // JVNDB: JVNDB-2013-004853 // CNNVD: CNNVD-201310-603 // NVD: CVE-2013-5192

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-65194 // JVNDB: JVNDB-2013-004853 // NVD: CVE-2013-5192

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201310-603

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201310-603

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-004853

PATCH
title:APPLE-SA-2013-10-22-3url:http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html
Trust: 0.8
title:HT6011url:http://support.apple.com/kb/HT6011
Trust: 0.8
title:HT6011url:http://support.apple.com/kb/HT6011?viewlocale=ja_JP
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2013-004853

EXTERNAL IDS
db:NVDid:CVE-2013-5192
Trust: 2.8
db:JVNid:JVNVU95174988
Trust: 0.8
db:JVNDBid:JVNDB-2013-004853
Trust: 0.8
db:CNNVDid:CNNVD-201310-603
Trust: 0.7
db:APPLEid:APPLE-SA-2013-10-22-3
Trust: 0.6
db:BIDid:63352
Trust: 0.4
db:VULHUBid:VHN-65194
Trust: 0.1
sources:
            
            
            VULHUB: VHN-65194 // 
            
            
            
            BID: 63352 // 
            
            
            
            JVNDB: JVNDB-2013-004853 // 
            
            
            
            CNNVD: CNNVD-201310-603 // 
            
            
            
            NVD: CVE-2013-5192

REFERENCES
url:http://lists.apple.com/archives/security-announce/2013/oct/msg00004.html
Trust: 2.0
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-5192
Trust: 0.8
url:http://jvn.jp/cert/jvnvu95174988/
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-5192
Trust: 0.8
url:http://software.cisco.com/download/navigator.html?mdfid=283613663
Trust: 0.3
sources:
            
            
            VULHUB: VHN-65194 // 
            
            
            
            BID: 63352 // 
            
            
            
            JVNDB: JVNDB-2013-004853 // 
            
            
            
            CNNVD: CNNVD-201310-603 // 
            
            
            
            NVD: CVE-2013-5192

CREDITS
Stefano Bianchi Mazzone, Mattia Pagnozzi, and Aristide Fattori of Computer and Network Security Lab (LaSER), Universita degli Studi di Milano
Trust: 0.3
sources:
            
            
            BID: 63352

SOURCES
db:VULHUBid:VHN-65194
db:BIDid:63352
db:JVNDBid:JVNDB-2013-004853
db:CNNVDid:CNNVD-201310-603
db:NVDid:CVE-2013-5192

LAST UPDATE DATE
2025-04-11T21:42:30.590000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-65194date:2013-10-24T00:00:00
db:BIDid:63352date:2013-10-22T00:00:00
db:JVNDBid:JVNDB-2013-004853date:2013-10-31T00:00:00
db:CNNVDid:CNNVD-201310-603date:2013-10-25T00:00:00
db:NVDid:CVE-2013-5192date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:VULHUBid:VHN-65194date:2013-10-24T00:00:00
db:BIDid:63352date:2013-10-22T00:00:00
db:JVNDBid:JVNDB-2013-004853date:2013-10-25T00:00:00
db:CNNVDid:CNNVD-201310-603date:2013-10-25T00:00:00
db:NVDid:CVE-2013-5192date:2013-10-24T03:48:52.613