PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2013 document archive · 3

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

422 documents · Identifier year 2013 · 3 / 9

  1. CVE-2013-6429Framework: XML External Entity (XXE) injection flaw
  2. CVE-2013-6427hplip: insecure auto update feature
  3. CVE-2013-6425pixman: integer underflow when handling trapezoids
  4. CVE-2013-6424xorg-x11-server: integer underflow when handling trapezoids
  5. CVE-2013-6422curl: TLS/SSL certificate name check disabled with peer verification when using GnuTLS
  6. CVE-2013-6420php: memory corruption in openssl_x509_parse()
  7. CVE-2013-6418pywbem: TOCTOU vulnerability in certificate validation
  8. CVE-2013-6412augeas: incorrect permissions set on newly created files
  9. CVE-2013-6402hplip: insecure temporary file handling in pkit.py
  10. CVE-2013-6401jansson: hash table collisions CPU usage DoS
  11. CVE-2013-6399qemu: virtio: buffer overrun on incoming migration
  12. CVE-2013-6393libyaml: heap-based buffer overflow when parsing YAML tags
  13. CVE-2013-6383Kernel: AACRAID Driver compat IOCTL missing capability check
  14. CVE-2013-6382Kernel: fs: xfs: missing check for ZERO_SIZE_PTR
  15. CVE-2013-6381Kernel: qeth: buffer overflow in snmp ioctl
  16. CVE-2013-6380Kernel: aacraid: invalid pointer dereference
  17. CVE-2013-6378Kernel: drivers: libertas: potential oops in debugfs
  18. CVE-2013-6376kernel: kvm: BUG_ON() in apic_cluster_id()
  19. CVE-2013-6371json-c: hash collision DoS
  20. CVE-2013-6370json-c: buffer overflow if size_t is larger than int
  21. CVE-2013-6369jbigkit: stack-based buffer overflow flaw
  22. CVE-2013-6368kvm: cross page vapic_addr access
  23. CVE-2013-6367kvm: division by zero in apic_get_tmcct()
  24. CVE-2013-6340wireshark: TCP dissector crash (wnpa-sec-2013-65)
  25. CVE-2013-6339wireshark: ActiveMQ OpenWire dissector large loop (wnpa-sec-2013-64)
  26. CVE-2013-6338wireshark: SIP dissector crash (wnpa-sec-2013-63)
  27. CVE-2013-6337wireshark: NBAP dissector crash (wnpa-sec-2013-62)
  28. CVE-2013-6336wireshark: IEEE 802.15.4 dissector crash (wnpa-sec-2013-61)
  29. CVE-2013-6230bind: localnets ACL bypass caused by WinSock API bug
  30. CVE-2013-6171dovecot: passdb checkpassword authentication local bypass
  31. CVE-2013-6167Mozilla: browser document.cookie DoS vulnerability
  32. CVE-2013-6076strongswan: denial of service when handling IKEv1 fragmentation payloads
  33. CVE-2013-6075strongswan: denial of service and potential authorization bypass
  34. CVE-2013-6054openjpeg: heap-based buffer overflows in version 1.3
  35. CVE-2013-6053openjpeg: out-of-bounds memory read flaws in version 1.5.1
  36. CVE-2013-6052openjpeg: out-of-bounds memory read flaws
  37. CVE-2013-6051quagga: bgp crash when receiving bgp updates
  38. CVE-2013-6045openjpeg: heap-based buffer overflows
  39. CVE-2013-5910OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)
  40. CVE-2013-5908mysql: unspecified vulnerability related to Error Handling DoS (CPU Jan 2014)
  41. CVE-2013-5907ICU: Layout Engine LookupProcessor insufficient input checks (JDK 2D, 8025034)
  42. CVE-2013-5906JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)
  43. CVE-2013-5905JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)
  44. CVE-2013-5904JDK: unspecified vulnerability fixed in 7u51 (Deployment)
  45. CVE-2013-5902JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)
  46. CVE-2013-5899JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)
  47. CVE-2013-5898JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)
  48. CVE-2013-5896OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)
  49. CVE-2013-5895JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)
  50. CVE-2013-5894mysql: unspecified vulnerability related to InnoDB DoS (CPU Jan 2014)
CVE 2013 document archive — Page 3 | PulseLinux