PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2013 document archive · 8

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

422 documents · Identifier year 2013 · 8 / 9

  1. CVE-2013-2929kernel: exec/ptrace: get_dumpable() incorrect tests
  2. CVE-2013-2927webkitgtk: use-after-free in the HTMLFormElement::prepareForSubmission() (WSA-2015-0001)
  3. CVE-2013-2924icu: use-after-free flaw leads to denial of service
  4. CVE-2013-2899Kernel: HID: picolcd_core: NULL pointer dereference
  5. CVE-2013-2898Kernel: HID: sensor-hub: memory leak flaw
  6. CVE-2013-2897Kernel: HID: multitouch: heap overflow flaw
  7. CVE-2013-2896Kernel: HID: ntrig: NULL pointer dereference
  8. CVE-2013-2895Kernel: HID: logitech-dj: heap overflow flaw
  9. CVE-2013-2894Kernel: HID: lenovo-tpkbd: heap overflow flaw
  10. CVE-2013-2893Kernel: HID: LG: heap overflow flaw
  11. CVE-2013-2892Kernel: HID: pantherlord: heap overflow flaw
  12. CVE-2013-2891Kernel: HID: steelseries: heap overflow flaw
  13. CVE-2013-2890Kernel: HID: Sony heap overflow flaw
  14. CVE-2013-2889Kernel: HID: zeroplus: heap overflow flaw
  15. CVE-2013-2888Kernel: HID: memory corruption flaw
  16. CVE-2013-2875webkitgtk: out-of-bounds read in the SVG implementation (WSA-2015-0001)
  17. CVE-2013-2871webkitgtk: use-after-free vulnerability in the handling of input (WSA-2015-0001)
  18. CVE-2013-2852kernel: b43: format string leaking into error msgs
  19. CVE-2013-2851kernel: block: passing disk names as format strings
  20. CVE-2013-2850kernel: iscsi-target: heap buffer overflow on large key error
  21. CVE-2013-2596kernel: integer overflow in fb_mmap
  22. CVE-2013-2419ICU: Layout Engine font processing errors (JDK 2D, 8001031)
  23. CVE-2013-2384ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004987)
  24. CVE-2013-2383ICU: Layout Engine font layout and glyph table errors (JDK 2D, 8004986)
  25. CVE-2013-2249httpd: mod_session_dbd session fixation flaw
  26. CVE-2013-2236Quagga: OSPFD Potential remote code exec (stack based buffer overflow)
  27. CVE-2013-2231qemu: qemu-ga win32 service unquoted search path
  28. CVE-2013-2230libvirt: multiple registered events crash
  29. CVE-2013-2224kernel: net: IP_REPOPTS invalid free
  30. CVE-2013-2219Server: ACLs inoperative in some search scenarios
  31. CVE-2013-2217python-suds: Insecure temporary directory use when initializing file-based URL cache
  32. CVE-2013-2207(pt_chown): Improper pseudotty ownership and permissions changes when granting access to the slave pseudoterminal
  33. CVE-2013-2190clutter: Improper translation of hierarchy events (gnome-shell crash after system resume)
  34. CVE-2013-2189libreoffice: Memory corruption when parsing invalid PLCF data by processing certain DOC files
  35. CVE-2013-2152rhevm: spice service unquoted search path
  36. CVE-2013-2151rhevm: rhev agent service unquoted search path
  37. CVE-2013-2144rhevm: insufficient target domain permission check when cloning a VM from a snapshot
  38. CVE-2013-2139libsrtp: buffer overflow in application of crypto profiles
  39. CVE-2013-2126LibRaw: double-free flaw when handling damaged full-color in Foveon and sRAW files
  40. CVE-2013-2099python: ssl.match_hostname() DoS via certificates with specially crafted hostname wildcard patterns
  41. CVE-2013-2062libXp: Integer overflow leading to heap-based buffer overflow
  42. CVE-2013-2007qemu: guest agent creates files with insecure permissions in deamon mode
  43. CVE-2013-1953autotrace: buffer overflow when parsing BMP files
  44. CVE-2013-1940xorg-x11-server: Information disclosure due enabling events from hot-plug devices despite input from the device being momentarily disabled
  45. CVE-2013-1914glibc: Stack (frame) overflow in getaddrinfo() when processing entry mapping to long list of address structures
  46. CVE-2013-1913gimp: xwd plugin g_new() integer overflow
  47. CVE-2013-1896httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav
  48. CVE-2013-1881librsvg2: local resource access vulnerability due to XML External Entity enablement
  49. CVE-2013-1777geronimo: Improper RMI classloader implementation in JMX remoting functionality leading to arbitrary code execution
  50. CVE-2013-1764PackageKit: downgrade packages when using the Zypper backend
CVE 2013 document archive — Page 8 | PulseLinux