Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-7231 State: PUBLISHED Published: 2013-12-30T02:00:00Z Last Updated: 2024-09-17T01:21:00.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Mobile Content Server in ESRI ArcGIS for Server 10.1 and 10.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-5222. Additional Analyst Notes: - CVE Program Container: References: - http://support.esri.com/en/knowledgebase/techarticles/detail/41468 - http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009
CVE ID: CVE-2013-7232 State: PUBLISHED Published: 2013-12-30T02:00:00Z Last Updated: 2024-09-16T22:50:26.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service. Additional Analyst Notes: - CVE Program Container: References: - http://support.esri.com/en/downloads/patches-servicepacks/view/productid/66/metaid/2009
CVE ID: CVE-2013-7233 State: PUBLISHED Published: 2013-12-30T02:00:00Z Last Updated: 2024-09-16T18:12:51.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of administrators for requests that move comments to the moderation list. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/101184 - http://seclists.org/fulldisclosure/2013/Dec/145
CVE ID: CVE-2013-7234 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:19.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/12/30/1 - http://www.openwall.com/lists/oss-security/2013/12/30/3 - http://seclists.org/fulldisclosure/2013/Dec/83 - http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/ - http://download.simplemachines.org/index.php?thanks%3Bfilenam
13/12/13/multiple-vulnerabilities-in-smf-forum-software/ - http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt
CVE ID: CVE-2013-7235 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:20.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Machines Forum (SMF) before 1.1.19 and 2.x before 2.0.6 allows remote attackers to impersonate arbitrary users via multiple space characters characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/12/30/1 - http://www.openwall.com/lists/oss-security/2013/12/30/3 - http://seclists.org/fulldisclosure/2013/Dec/83 - http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/ - http://download.simplemachines.org/index.php?thanks
om/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/ - http://download.simplemachines.org/index.php?thanks%3Bfilename=smf_2-0-6_changelog.txt
CVE ID: CVE-2013-7236 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:20.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/12/30/1 - http://www.openwall.com/lists/oss-security/2013/12/30/3 - http://seclists.org/fulldisclosure/2013/Dec/83 - http://www.jakoblell.com/blog/2013/12/13/multiple-vulnerabilities-in-smf-forum-software/
CVE ID: CVE-2013-7239 State: PUBLISHED Published: 2014-01-13T21:00:00 Last Updated: 2024-08-06T18:01:20.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64559 - https://code.google.com/p/memcached/wiki/ReleaseNotes1417 - http://seclists.org/oss-sec/2013/q4/572 - http://www.ubuntu.com/usn/USN-2080-1 - http://www.debian.org/security/2014/dsa-2832 - http://secunia.com/advisories/56183
CVE ID: CVE-2013-7240 State: PUBLISHED Published: 2014-01-02T15:00:00 Last Updated: 2024-08-06T18:01:20.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dew_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://wordpress.org/support/topic/security-vulnerability-cve-2013-7240-directory-traversal - http://seclists.org/oss-sec/2013/q4/570 - http://www.securityfocus.com/bid/64587 - http://seclists.org/oss-sec/2013/q4/566
CVE ID: CVE-2013-7241 State: PUBLISHED Published: 2013-12-31T11:00:00 Last Updated: 2024-08-06T18:01:19.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the export function in zp-core/zp-extensions/mergedRSS.php in Zenphoto before 1.4.5.4 allows remote attackers to inject arbitrary web script or HTML via the URI. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2013/12/30/10 - http://seclists.org/bugtraq/2013/Oct/20 - http://openwall.com/lists/oss-security/2013/12/29/1 - http://www.zenphoto.org/news/zenphoto-1.4.5.4 - http://www.enkomio.com/Advisory/SOJOBO-ADV-13-01 - http://www.
12/29/1 - http://www.zenphoto.org/news/zenphoto-1.4.5.4 - http://www.enkomio.com/Advisory/SOJOBO-ADV-13-01 - http://www.securityfocus.com/bid/62815
CVE ID: CVE-2013-7242 State: PUBLISHED Published: 2013-12-31T11:00:00 Last Updated: 2024-08-06T18:01:20.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in zp-core/zp-extensions/wordpress_import.php in Zenphoto before 1.4.5.4 allows remote authenticated administrators to execute arbitrary SQL commands via the tableprefix parameter. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2013/12/30/10 - http://seclists.org/bugtraq/2013/Oct/20 - http://openwall.com/lists/oss-security/2013/12/29/1 - http://www.zenphoto.org/news/zenphoto-1.4.5.4 - http://www.enkomio.com/Advisory/SOJOBO-ADV-13-01 - http://w
13/12/29/1 - http://www.zenphoto.org/news/zenphoto-1.4.5.4 - http://www.enkomio.com/Advisory/SOJOBO-ADV-13-01 - http://www.securityfocus.com/bid/62815
CVE ID: CVE-2013-7243 State: PUBLISHED Published: 2014-01-17T15:00:00 Last Updated: 2024-08-06T18:01:19.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) post-menu field to edit.php or (2) Display name field to settings.php. NOTE: The Custom Permalink Structure and Email Address fields are already covered by CVE-2012-6621. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/90191 - http://packetstormsecurity.com/files/124711 - http://osvdb.org/101922
CVE ID: CVE-2013-7245 State: PUBLISHED Published: 2018-04-24T20:00:00 Last Updated: 2024-08-06T18:01:20.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials, aka SAP Security Note 1927859. Additional Analyst Notes: - CVE Program Container: References: - https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-035.txt - http://blog.spiderlabs.com/2014/01/sap-sybase-ase-157-security-updates.html
CVE ID: CVE-2013-7246 State: PUBLISHED Published: 2014-01-30T18:00:00 Last Updated: 2024-08-06T18:01:19.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IconCreate method in an ActiveX control in the DaumGame ActiveX plugin 1.1.0.4 and 1.1.0.5 allows remote attackers to execute arbitrary code via a long string, as exploited in the wild in January 2014. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124886 - http://www.exploit-db.com/exploits/31179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/90588 - http://blog.spiderlabs.com/2014/01/daumgame-activex-0day.html - http://seclists.org/fulldisc
com/vulnerabilities/90588 - http://blog.spiderlabs.com/2014/01/daumgame-activex-0day.html - http://seclists.org/fulldisclosure/2014/Jan/132 - https://www.trustwave.com/spiderlabs/advisories/TWSL2014-002.txt
CVE ID: CVE-2013-7247 State: PUBLISHED Published: 2014-01-26T01:00:00 Last Updated: 2024-08-06T18:01:19.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: cgi-bin/tsaws.cgi in Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 allows remote attackers to discover sensitive information (user names and password hashes) via the cmdWebGetConfiguration action in a TSA_REQUEST. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2014-001.txt
CVE ID: CVE-2013-7248 State: PUBLISHED Published: 2014-01-26T01:00:00 Last Updated: 2024-08-06T18:01:19.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password for the roleDiag account, which allows remote attackers to gain root privileges, as demonstrated using a cmdWebCheckRole action in a TSA_REQUEST. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/spiderlabs/advisories/TWSL2014-001.txt
CVE ID: CVE-2013-7249 State: PUBLISHED Published: 2014-01-02T11:00:00 Last Updated: 2024-08-06T18:01:20.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fat Free CRM before 0.12.1 does not restrict XML serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.xml, a different vulnerability than CVE-2013-7224. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2013/Dec/199 - http://openwall.com/lists/oss-security/2013/12/28/2 - http://www.phenoelit.org/stuff/ffcrm.txt - https://github.com/fatfreecrm/fat_free_crm/commit/cf26a04b356ad2161c4c6160260eb8
p://www.phenoelit.org/stuff/ffcrm.txt - https://github.com/fatfreecrm/fat_free_crm/commit/cf26a04b356ad2161c4c6160260eb870a3de5328 - https://github.com/fatfreecrm/fat_free_crm/issues/300 - https://github.com/fatfreecrm/fat_free_crm/wiki/Fixing-security-vulnerabilities-%2827th-Dec-2013%29
CVE ID: CVE-2013-7250 State: PUBLISHED Published: 2014-01-02T11:00:00 Last Updated: 2024-08-06T18:01:20.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the JsonBuilder implementation in ProjectForge before 5.3 allows remote authenticated users to inject arbitrary web script or HTML via an autocompletion string, related to web/core/JsonBuilder.java and web/wicket/autocompletion/PFAutoCompleteBehavior.java. Additional Analyst Notes: - CVE Program Container: References: - https://www.projectforge.org/jira/browse/PF-483 - https://github.com/micromata/projectforge-webapp/commit/5a6a25366491443b76e528a04a9e4ba26f08a83c - http://www.projec
3 - https://github.com/micromata/projectforge-webapp/commit/5a6a25366491443b76e528a04a9e4ba26f08a83c - http://www.projectforge.org/pf-en/News - http://www.securityfocus.com/bid/64632
CVE ID: CVE-2013-7251 State: PUBLISHED Published: 2014-01-02T11:00:00 Last Updated: 2024-08-06T18:01:20.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3 allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) web/admin/, (2) web/core/, (3) web/dialog/, (4) web/fibu/, (5) web/mobile/, (6) web/task/, or (7) web/wicket/. Additional Analyst Notes: - CVE Program Container: References: - https://www.projectforge.org/jira/browse/PF-485 - http://www.projectforge.org/pf-en/News - http://www.securityfocus.com/bid/64632 - https://github.com/micromata/projectforg
tp://www.projectforge.org/pf-en/News - http://www.securityfocus.com/bid/64632 - https://github.com/micromata/projectforge-webapp/commit/422de35e3c3141e418a73bfb39b430d5fd74077e
CVE ID: CVE-2013-7252 State: PUBLISHED Published: 2015-01-18T18:00:00 Last Updated: 2024-08-06T18:01:20.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack. Additional Analyst Notes: - CVE Program Container: References: - http://gaganpreet.in/blog/2013/07/24/kwallet-security-analysis/ - http://www.securityfocus.com/bid/67716 - https://www.kde.org/info/security/advisory-20150109-1.txt - https://bugzilla.redhat.com/show_bug.cgi?id=1048168 - http://www.openwall.com/lists/os
ecurity/advisory-20150109-1.txt - https://bugzilla.redhat.com/show_bug.cgi?id=1048168 - http://www.openwall.com/lists/oss-security/2014/01/02/3 - https://security.gentoo.org/glsa/201606-19 - http://www.openwall.com/lists/oss-security/2015/01/09/7
CVE ID: CVE-2013-7253 State: REJECTED Published: 2022-06-30T20:28:26 Last Updated: 2022-06-30T20:28:26 Description: No description available.
CVE ID: CVE-2013-7254 State: PUBLISHED Published: 2014-01-02T15:00:00 Last Updated: 2024-08-06T18:01:19.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89934 - http://docs.opsview.com/doku.php?id=opsview4.4:changes - http://secunia.com/advisories/56096
CVE ID: CVE-2013-7255 State: PUBLISHED Published: 2014-01-02T15:00:00 Last Updated: 2024-08-06T18:01:19.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/89935 - http://docs.opsview.com/doku.php?id=opsview4.4:changes - http://secunia.com/advisories/56096
CVE ID: CVE-2013-7256 State: PUBLISHED Published: 2014-01-02T15:00:00Z Last Updated: 2024-09-16T20:32:30.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes - http://secunia.com/advisories/56096
CVE ID: CVE-2013-7257 State: PUBLISHED Published: 2014-01-02T15:00:00 Last Updated: 2024-08-06T18:01:20.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name field. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/124537 - https://github.com/Codiad/Codiad/issues/584 - http://osvdb.org/101484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89903 - http://www.securityfocus.com/bid/64476
CVE ID: CVE-2013-7258 State: PUBLISHED Published: 2014-01-02T15:00:00 Last Updated: 2024-08-06T18:01:20.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in web2ldap 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "displaying group DN and entry data in group administration UI." Additional Analyst Notes: - CVE Program Container: References: - http://www.web2ldap.de/changes-1.1.html - http://secunia.com/advisories/56160 - http://www.securityfocus.com/bid/64512
CVE ID: CVE-2013-7259 State: PUBLISHED Published: 2014-04-29T14:00:00 Last Updated: 2024-08-06T18:01:19.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to (1) db/data/ext/GremlinPlugin/graphdb/execute_script or (2) db/manage/server/console/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/o2platform/DefCon_RESTing/tree/master/Live-Demos/Neo4j - http://blog.diniscruz.com/2013/08/neo4j-csrf-payload-to-start-processes.html - http://
ng/tree/master/Live-Demos/Neo4j - http://blog.diniscruz.com/2013/08/neo4j-csrf-payload-to-start-processes.html - http://www.openwall.com/lists/oss-security/2014/01/03/8 - http://www.openwall.com/lists/oss-security/2014/01/03/3
CVE ID: CVE-2013-7260 State: PUBLISHED Published: 2014-01-03T20:00:00 Last Updated: 2024-08-06T18:01:20.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file, a different issue than CVE-2013-6877. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/64695 - http://www.exploit-db.com/exploits/30468/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/90160 - http
id/64695 - http://www.exploit-db.com/exploits/30468/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/90160 - http://www.kb.cert.org/vuls/id/698278 - http://service.real.com/realplayer/security/12202013_player/en/
CVE ID: CVE-2013-7262 State: PUBLISHED Published: 2014-01-05T20:00:00 Last Updated: 2024-08-06T18:01:20.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter. Additional Analyst Notes: - CVE Program Container: References: - http://www.mapserver.org/development/changelog/changelog-6-4.html#changelog-6-4-1 - https://github.com/mapserver/mapserver/issues/4834 - http://www.securityfocus.com/bid/64671 - https://github.com/mapserver/mapserv
thub.com/mapserver/mapserver/issues/4834 - http://www.securityfocus.com/bid/64671 - https://github.com/mapserver/mapserver/commit/3a10f6b829297dae63492a8c63385044bc6953ed
CVE ID: CVE-2013-7263 State: PUBLISHED Published: 2014-01-06T11:00:00 Last Updated: 2024-08-06T18:01:20.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://rhn.redhat.com/errata/RHSA-2014-0159.html - http:
Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://rhn.redhat.com/errata/RHSA-2014-0159.html - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2108-1 - http://rhn.redhat.com/errata/RHSA-2014-0285.html - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html - http://www.ubuntu.com/usn/USN-2110-1 - http://seclists.org/oss-sec/2014/q1/29 - http://www.ubuntu.com/usn/USN-2136-1 - http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00000.html - http://www.ubuntu.com/usn/USN-2139-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - htt
sg00000.html - http://www.ubuntu.com/usn/USN-2139-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - https://github.com/torvalds/linux/commit/bceaa90240b6019ed73b49965eac7d167610be69 - http://www.ubuntu.com/usn/USN-2117-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1035875 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html - http://secunia.com/advisories/56036 - http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html - http://www.ubuntu.com/usn/USN-2109-1 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html - http://www.ubuntu.com/usn/USN-2107-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.
14-03/msg00026.html - http://www.ubuntu.com/usn/USN-2107-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bceaa90240b6019ed73b49965eac7d167610be69 - http://www.openwall.com/lists/oss-security/2013/11/28/13 - http://secunia.com/advisories/55882
CVE ID: CVE-2013-7264 State: PUBLISHED Published: 2014-01-06T11:00:00 Last Updated: 2024-08-06T18:01:20.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: The l2tp_ip_recvmsg function in net/l2tp/l2tp_ip.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2108-1 - http://www.ubuntu.
tu.com/usn/USN-2135-1 - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2108-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.ubuntu.com/usn/USN-2110-1 - http://seclists.org/oss-sec/2014/q1/29 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4 - https://github.com/torvalds/linux/commit/bceaa90240b6019ed73b49965eac7d167610be69 - http://www.ubuntu.com/usn/USN-2117-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1035875 - http://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://lists.opensuse.org/opensuse-security-a
tp://secunia.com/advisories/56036 - http://www.ubuntu.com/usn/USN-2109-1 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html - http://www.ubuntu.com/usn/USN-2107-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bceaa90240b6019ed73b49965eac7d167610be69 - http://www.openwall.com/lists/oss-security/2013/11/28/13 - http://secunia.com/advisories/55882