PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2013 document archive

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

422 documents · Identifier year 2013 · 1 / 9

  1. CVE-2013-10075Apache::Session: Perl: Apache::Session::Store::File: Apache::Session::Store::DB_File: Apache::Session: Information disclosure due to re-creation of deleted sessions
  2. CVE-2013-7491perl-dbi: Stack corruption on callbacks
  3. CVE-2013-7490perl-dbi: Risk of memory corruption with many arguments in DBI method dispatch
  4. CVE-2013-7489python-beaker: Deserialization of Untrusted Data which can lead to Arbitrary code execution
  5. CVE-2013-7488perl-Convert-ASN1: allows remote attackers to cause an infinite loop via unexpected input
  6. CVE-2013-7470kernel: disabled CONFIG_NETLABEL in cipso_v4_validate in include/net/cipso_ipv4.h leads to denial of service
  7. CVE-2013-7459pycrypto: Heap-buffer overflow in ALGobject structure
  8. CVE-2013-7456gd: incorrect boundary adjustment in _gdContributionsCalc
  9. CVE-2013-7455lcms2: double free on error recovering
  10. CVE-2013-7449xchat/hexchat: does not verify the server hostname matches the domain name in the subject's Common Name (CN) or subjectAltName field in X.509 certificates
  11. CVE-2013-7447gtk3: Integer overflow in image handling
  12. CVE-2013-7446kernel: Unix sockets use after free - peer_wait_queue prematurely freed
  13. CVE-2013-7445kernel: memory exhaustion via crafted Graphics Execution Manager (GEM) objects
  14. CVE-2013-7443sqlite: array overrun in the skip-scan optimization leading to memory corruption (DoS)
  15. CVE-2013-7440python: wildcard matching rules do not follow RFC 6125
  16. CVE-2013-7439libX11: buffer overflow in MakeBigReq macro
  17. CVE-2013-7436novnc: session hijack through insecurely set session token cookies
  18. CVE-2013-7424glibc: Invalid-free when using getaddrinfo()
  19. CVE-2013-7423glibc: getaddrinfo() writes DNS queries to random file descriptors under high load
  20. CVE-2013-7422perl: segmentation fault in S_regmatch on negative backreference
  21. CVE-2013-7421kernel: crypto api unprivileged arbitrary module load via request_module()
  22. CVE-2013-7393subversion: svnwcsub.py and irkerbridge.py are vulnerable to symlink attack
  23. CVE-2013-7354libpng: integer overflow leading to a heap-based buffer overflow in png_set_sPLT() and png_set_text_2()
  24. CVE-2013-7353libpng: integer overflow leading to a heap-based buffer overflow in png_set_unknown_chunks()
  25. CVE-2013-7348kernel: aio: double free in ioctx_alloc
  26. CVE-2013-7345file: extensive backtracking in awk rule regular expression
  27. CVE-2013-7339kernel: net: rds: dereference of a NULL device in rds_ib_laddr_check()
  28. CVE-2013-7338python: malformed ZIP files could cause 100% CPU usage
  29. CVE-2013-7336libvirt: unprivileged user can crash libvirtd during spice migration
  30. CVE-2013-7328php: multiple vulnerabilities in gdImageCrop()
  31. CVE-2013-7327php: multiple vulnerabilities in gdImageCrop()
  32. CVE-2013-7296poppler: DoS due to a format string error
  33. CVE-2013-7294libreswan: DoS via an IKEv2 I1 notification
  34. CVE-2013-7291memcached: remote DoS (crash) via a request that triggers "unbounded key print"
  35. CVE-2013-7290memcached: remote DoS (segmentation fault) via a request to delete a key
  36. CVE-2013-7285XStream: remote code execution due to insecure XML deserialization
  37. CVE-2013-7284perl-PlRPC: pre-auth remote code execution
  38. CVE-2013-7283libreswan: insecure tmp files on rpm package installation
  39. CVE-2013-7281Kernel: net: leakage of uninitialized memory to user-space via recv syscalls
  40. CVE-2013-7273gdm: local DoS possible when cancelling and disable-user-list=true when fallback greeter is used
  41. CVE-2013-7271Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic
  42. CVE-2013-7270Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic
  43. CVE-2013-7269Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic
  44. CVE-2013-7268Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic
  45. CVE-2013-7267Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic
  46. CVE-2013-7266Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic
  47. CVE-2013-7265Kernel: net: leakage of uninitialized memory to user-space via recv syscalls
  48. CVE-2013-7264Kernel: net: leakage of uninitialized memory to user-space via recv syscalls
  49. CVE-2013-7263Kernel: net: leakage of uninitialized memory to user-space via recv syscalls
  50. CVE-2013-7252kwallet: crypto misuse
CVE 2013 document archive | PulseLinux