CVE-2013-0420 Denial of service in n/a
Local attackers can cause denial of service and integrity issues in VirtualBox via a flaw in the VGA text drawing function.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-0420?
CVE-2013-0420 is a low-severity denial of service vulnerability in Opensuse Opensuse, published on 17 Jan 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the vga_draw_text function in Devices/Graphics/DevVGA.cpp, which can cause VirtualBox to "draw more lines than necessary."
Which versions are affected by CVE-2013-0420?
It affects 3 products.
Products include Opensuse Opensuse, Oracle Virtualization, Oracle Vm Virtualbox.
How do I fix CVE-2013-0420?
No fix has been published for CVE-2013-0420 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2013-0420 being exploited?
There is no known exploitation of CVE-2013-0420 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Opensuse
Sources
Also known as GHSA-p2wh-44xv-2q95.