CVE 2013 document archive · 2
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
422 documents · Identifier year 2013 · 2 / 9
- CVE-2013-7239memcached: SASL authentication allows wrong credentials to access memcache
- CVE-2013-7226php: multiple vulnerabilities in gdImageCrop()
- CVE-2013-7221gnome-shell: run command dialog visible above screen locker
- CVE-2013-7220gnome-shell: blind command execution via activities search keyboard focus
- CVE-2013-7172libiodbc: insecure RPATH in certain binaries
- CVE-2013-7171llvm: insecure RPATH in certain binaries
- CVE-2013-7114wireshark: NTLMSSP v2 dissector could crash (wnpa-sec-2013-68)
- CVE-2013-7113wireshark: BSSGP dissector could crash (wnpa-sec-2013-67)
- CVE-2013-7112wireshark: SIP dissector could go into an infinite loop (wnpa-sec-2013-66)
- CVE-2013-7041pam: pam_userdb case insensitive password hash comparison
- CVE-2013-7040python: hash secret can be recovered remotely
- CVE-2013-7039libmicrohttpd: stack overflow in MHD_digest_auth_check()
- CVE-2013-7038libmicrohttpd: out-of-bounds read in MHD_http_unescape()
- CVE-2013-7026Kernel: ipc,shm: oops caused by shm_file deletion race condition
- CVE-2013-6954libpng: unhandled zero-length PLTE chunk or NULL palette
- CVE-2013-6891cups: lppasswd vulnerability allows data access to unprivileged user
- CVE-2013-6887openjpeg: multiple denial of service flaws in version 1.5.1
- CVE-2013-6800krb5: KDC remote DoS (NULL pointer dereference and daemon crash)
- CVE-2013-6712php: heap-based buffer over-read in DateInterval
- CVE-2013-6630libjpeg: information leak (read of uninitialized memory)
- CVE-2013-6629libjpeg: information leak (read of uninitialized memory)
- CVE-2013-6501php: predictable file name used for cache in world writeable directory
- CVE-2013-6493icedtea-web: insecure temporary file use flaw in LiveConnect implementation
- CVE-2013-6490pidgin: Heap-based buffer overflow in SIMPLE protocol plugin
- CVE-2013-6489pidgin: Heap-based buffer overflow in MXit emoticon parsing
- CVE-2013-6487pidgin: Heap-based buffer overflow in Gadu-Gadu protocol plugin
- CVE-2013-6485pidgin: Heap-based buffer overflow when parsing chunked HTTP responses
- CVE-2013-6484pidgin: DoS via specially-crafted stun messages
- CVE-2013-6483pidgin: Possible spoofing using iq replies in XMPP protocol plugin
- CVE-2013-6482pidgin: DoS via multiple null pointer dereferences in MSN protocol plugin
- CVE-2013-6481pidgin: DoS caused due to OOB read in Yahoo protocol plugin
- CVE-2013-6479pidgin: DoS when parsing certain HTTP response headers
- CVE-2013-6478pidgin: DoS when rendering long URLs
- CVE-2013-6477pidgin: DoS when handling timestamps in the XMPP plugin
- CVE-2013-6475cups-filters: possible heap-based buffer overflows due to the use of gmalloc
- CVE-2013-6467libreswan: dereferencing missing IKEv2 payloads causes pluto daemon to restart
- CVE-2013-6462libXfont: stack-based buffer overflow flaw when parsing Glyph Bitmap Distribution Format (BDF) fonts
- CVE-2013-6458qemu: job usage issue in several APIs leading to libvirtd crash
- CVE-2013-6457libvirt: avoid crashing if calling 'virsh numatune' on an inactive domain (libxl)
- CVE-2013-6456libvirt: unsafe usage of paths under /proc/$PID/root
- CVE-2013-6450openssl: crash in DTLS renegotiation after packet loss
- CVE-2013-6449openssl: crash when using TLS 1.2 caused by use of incorrect hash algorithm
- CVE-2013-6444pywbem: failure to check certificate hostname
- CVE-2013-6442samba: smbcacls will delete ACL lists in certain circumstances
- CVE-2013-6441lxc: sshd template allow privilege escalation on host
- CVE-2013-6438httpd: mod_dav denial of service via crafted DAV WRITE request
- CVE-2013-6436libvirt: crash in lxcDomainGetMemoryParameters
- CVE-2013-6435rpm: race condition during the installation process
- CVE-2013-6432Kernel: ping: NULL pointer dereference on write to msg_name
- CVE-2013-6431kernel: net: fib: fib6_add: potential NULL pointer dereference