CVE-2007-3513

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-03 · updated 2026-06-16

Description

The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service (memory consumption).

Affected products

Linux kernel: through 2.6.22

References

http://osvdb.org/37116
http://secunia.com/advisories/25895
http://secunia.com/advisories/26139
http://secunia.com/advisories/26450
http://secunia.com/advisories/26643
http://secunia.com/advisories/26664
http://secunia.com/advisories/27212
http://secunia.com/advisories/27227
http://secunia.com/advisories/27322
http://www.debian.org/security/2007/dsa-1356
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.22-rc7
http://www.mandriva.com/security/advisories?name=MDKSA-2007:195

Get alerted when CVE-2007-3513 or the next vulnerability affects your stack