PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2013 document archive · 7

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

422 documents · Identifier year 2013 · 7 / 9

  1. CVE-2013-4283389-ds-base: ns-slapd crash due to bogus DN
  2. CVE-2013-4282spice: stack buffer overflow in reds_handle_ticket() function
  3. CVE-2013-4277subversion: svnserve is vulnerable to symlink attack
  4. CVE-2013-4276lcms: Stack-based buffer overflows in ColorSpace conversion calculator and TIFF compare utility
  5. CVE-2013-4270kernel: net: permissions flaw in /proc/sys/net
  6. CVE-2013-4262subversion: svnwcsub.py and irkerbridge.py are vulnerable to symlink attack
  7. CVE-2013-4254Kernel: ARM: perf: NULL pointer dereference in validate_event
  8. CVE-2013-4251scipy: weave /tmp and current directory issues
  9. CVE-2013-4248php: hostname check bypassing vulnerability in SSL client
  10. CVE-2013-4247kernel: cifs: off-by-one bug in build_unc_path_to_root
  11. CVE-2013-4246subversion: FSFS repository corruption due to editing packed revision properties
  12. CVE-2013-4244(gif2tiff): OOB Write in LZW decompressor
  13. CVE-2013-4243(gif2tiff): possible heap-based buffer overflow in readgifimage()
  14. CVE-2013-4242GnuPG susceptible to Yarom/Falkner flush+reload cache side-channel attack
  15. CVE-2013-4239libvirt: memory corruption in xenDaemonListDefinedDomains function
  16. CVE-2013-4238python: hostname check bypassing vulnerability in SSL module
  17. CVE-2013-4237glibc: Buffer overwrite when using readdir_r on file systems returning file names longer than NAME_MAX characters
  18. CVE-2013-4232(tiff2pdf): use-after-free in t2p_readwrite_pdf_image()
  19. CVE-2013-4231(gif2tiff): GIF LZW decoder missing datasize value check
  20. CVE-2013-4209ABRT: (substantially) limited leak of unauthorized information
  21. CVE-2013-4170ember.js: Cross-site scripting when binding `tagName` to User-Supplied Data
  22. CVE-2013-4164ruby: heap overflow in floating point parsing
  23. CVE-2013-4163Kernel: net: panic while appending data to a corked IPv6 socket in ip6_append_data_mtu
  24. CVE-2013-4162Kernel: net: panic while pushing pending data out of a IPv6 socket with UDP_CORK enabled
  25. CVE-2013-4160CMS: multiple potential flaws
  26. CVE-2013-4159ctdb: /tmp file vulnerability issues
  27. CVE-2013-4156libreoffice: NULL pointer dereference when parsing certain DOCM documents
  28. CVE-2013-4151qemu: virtio: out-of-bounds buffer write on invalid state load
  29. CVE-2013-4150qemu: virtio-net: out-of-bounds buffer write on invalid state load
  30. CVE-2013-4149qemu: virtio-net: out-of-bounds buffer write on load
  31. CVE-2013-4148qemu: virtio-net: buffer overflow on invalid state load
  32. CVE-2013-4132kde-workspace: NULL pointer dereference in KDM and KCheckPass when glibc 2.17 or FIPS-140 enabled system used
  33. CVE-2013-4131subversion: DoS (assertion failure, crash) in mod_dav_svn when handling certain MOVE, COPY, or DELETE HTTP requests
  34. CVE-2013-4130spice: unsafe clients ring access abort
  35. CVE-2013-4129kernel: bridge: kernel BUG at kernel/timer.c:729
  36. CVE-2013-4127kernel: vhost-net: use-after-free in vhost_net_flush
  37. CVE-2013-4125kernel: ipv6: BUG_ON in fib6_add_rt2node()
  38. CVE-2013-4124samba: DoS via integer overflow when reading an EA list
  39. CVE-2013-4123squid: Denial of service when processing specially-crafted HTTP requests (SQUID-2013:3)
  40. CVE-2013-4122cyrus-sasl: NULL pointer dereference (DoS) when glibc v.2.17 or FIPS-140 enabled Linux system used
  41. CVE-2013-4119freerdp: Multiple security fixes in versions after 1.1.0-beta1
  42. CVE-2013-4118freerdp: Multiple security fixes in versions after 1.1.0-beta1
  43. CVE-2013-4115squid: buffer overflow when processing overly long DNS names (SQUID-2013:2)
  44. CVE-2013-4113php: xml_parse_into_struct buffer overflow when parsing deeply nested XML
  45. CVE-2013-4081wireshark: DoS (infinite loop) in the HTTP dissector (wnpa-sec-2013-39)
  46. CVE-2013-4073ruby: hostname check bypassing vulnerability in SSL client
  47. CVE-2013-4002OpenJDK: XML parsing Denial of Service (JAXP, 8017298)
  48. CVE-2013-3839mysql: unspecified DoS related to Optimizer (CPU October 2013)
  49. CVE-2013-3718evince: Missing check of number of pages leads to segmentation fault
  50. CVE-2013-2930kernel: perf/ftrace: insufficient check in perf_trace_event_perm()
CVE 2013 document archive — Page 7 | PulseLinux