CVE 2013 document archive · 6
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
422 documents · Identifier year 2013 · 6 / 9
- CVE-2013-4444tomcat: remote code execution via uploaded JSP
- CVE-2013-4420libtar: missing validation of file names
- CVE-2013-4419libguestfs: insecure temporary directory handling for guestfish's network socket
- CVE-2013-4408samba: Heap-based buffer overflow due to incorrect DCE-RPC fragment length field check
- CVE-2013-4402GnuPG: infinite recursion in the compressed packet parser DoS
- CVE-2013-4401libvirt: unintended API access due to incorrect permissions checks
- CVE-2013-4400libvirt: virt-login-shell arbitrary file overwrites vulnerability
- CVE-2013-4399libvirt: unprivileged user can crash libvirtd when ACLs are enabled
- CVE-2013-4397libtar: Heap-based buffer overflows by expanding a specially-crafted archive
- CVE-2013-4396xorg-x11-server: use-after-free flaw when handling ImageText requests
- CVE-2013-4394systemd: Improper sanitization of invalid XKB layouts descriptions (privilege escalation when custom PolicyKit local authority file used)
- CVE-2013-4392systemd: TOCTOU race condition when updating file permissions and SELinux security contexts
- CVE-2013-4391systemd: Integer overflow, leading to heap-based buffer overflow by processing native messages
- CVE-2013-4387Kernel: net: IPv6: panic when UFO=On for an interface
- CVE-2013-4377qemu: hot-unplugging virtio devices in guest can crash host qemu process
- CVE-2013-4375xen: qemu disk backend (qdisk) resource leak (XSA-71)
- CVE-2013-4365mod_fcgid: heap overflow
- CVE-2013-4363rubygems: version regex algorithmic complexity vulnerability, incomplete CVE-2013-4287 fix
- CVE-2013-4361Kernel: Xen: Xsa-66: information leak through fbld instruction emulation
- CVE-2013-4357glibc: stack overflow in getaddrinfo()'s use of alloca()
- CVE-2013-4353openssl: client NULL dereference crash on malformed handshake packets
- CVE-2013-4352httpd: mod_cache NULL pointer dereference crash
- CVE-2013-4351gnupg: treats no-usage-permitted keys as all-usages-permitted
- CVE-2013-4350kernel: net: sctp: ipv6 ipsec encryption bug in sctp_v6_xmit
- CVE-2013-4348kernel: net: deadloop path in skb_flow_dissect()
- CVE-2013-4345kernel: ansi_cprng: off by one error in non-block size request
- CVE-2013-4344qemu: buffer overflow in scsi_target_emulate_report_luns
- CVE-2013-4343Kernel: net: use-after-free TUNSETIFF
- CVE-2013-4342xinetd: ignores user and group directives for tcpmux services
- CVE-2013-4332glibc: three integer overflows in memory allocator
- CVE-2013-4327systemd: insecure calling of polkit
- CVE-2013-4326rtkit: insecure calling of polkit
- CVE-2013-4325hplip: Insecure calling of polkit
- CVE-2013-4324spice-gtk: Insecure calling of polkit via polkit_unix_process_new()
- CVE-2013-4322tomcat: incomplete fix for CVE-2012-3544
- CVE-2013-4314pyOpenSSL: hostname check bypassing vulnerability
- CVE-2013-4312kernel: File descriptors passed over unix sockets are not properly accounted
- CVE-2013-4311libvirt: insecure calling of polkit
- CVE-2013-4300Kernel: net: PID spoofing privilege escalation flaw
- CVE-2013-4299kernel: dm: dm-snapshot data leak
- CVE-2013-4298ImageMagick: One-byte heap-based buffer overflow when decoding certain GIF images
- CVE-2013-4297libvirt: invalid free in virFileNBDDeviceAssociate
- CVE-2013-4296libvirt: invalid free in remoteDispatchDomainMemoryStats
- CVE-2013-4292libvirt: unbounded RPC arrays in remote protocol
- CVE-2013-4291libvirt: supplementary groups not adjusted correctly when parsing label
- CVE-2013-4290openjpeg: multiple stack-based buffer overflows
- CVE-2013-4289openjpeg: multiple heap-based buffer overflows
- CVE-2013-4288polkit: unix-process subject for authorization is racy
- CVE-2013-4287rubygems: version regex algorithmic complexity vulnerability
- CVE-2013-4286tomcat: multiple content-length header poisoning flaws