Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4131 State: PUBLISHED Published: 2013-07-31T10:00:00 Last Updated: 2024-08-06T16:30:50.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61454 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18621 - https://bugzilla.redhat.com/show_bug.cgi?id=
rity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18621 - https://bugzilla.redhat.com/show_bug.cgi?id=986194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85983 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00000.html - http://subversion.apache.org/security/CVE-2013-4131-advisory.txt
CVE ID: CVE-2013-4132 State: PUBLISHED Published: 2013-09-16T19:00:00Z Last Updated: 2024-08-06T16:30:50.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pw_encrypt functions, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via (1) an invalid salt or a (2) DES or (3) MD5 encrypted password, when FIPS-140 is enable, to KDM or an (4) invalid password to KCheckPass. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-08/msg00002.html - http://seclists.org/oss-sec/2013/q3/
r: References: - http://lists.opensuse.org/opensuse-updates/2013-08/msg00002.html - http://seclists.org/oss-sec/2013/q3/117 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00082.html - http://seclists.org/oss-sec/2013/q3/120 - https://git.reviewboard.kde.org/r/111261/
CVE ID: CVE-2013-4133 State: PUBLISHED Published: 2019-12-10T14:36:12 Last Updated: 2024-08-06T16:30:50.156Z Vendors: kde-workspace Products: kde-workspace Problem Types: leak Description: kde-workspace before 4.10.5 has a memory leak in plasma desktop Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4133 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4133 - https://access.redhat.com/security/cve/cve-2013-4133 - http://www.openwall.com/lists/oss-security/2013/07/16/4 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00002.html - http://www.securityfocus.com/bid/61201 - https://exchange.xforce.ibmcloud.com/vuln
nsuse-updates/2013-08/msg00002.html - http://www.securityfocus.com/bid/61201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85797
CVE ID: CVE-2013-4134 State: PUBLISHED Published: 2013-11-05T21:00:00 Last Updated: 2024-08-06T16:30:50.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2729 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:244 - http://www.openafs.org/pages/security/OPENAFS-SA-2013-003.txt
CVE ID: CVE-2013-4135 State: PUBLISHED Published: 2013-11-05T21:00:00 Last Updated: 2024-08-06T16:30:49.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.openafs.org/pages/security/OPENAFS-SA-2013-004.txt - http://www.debian.org/security/2013/dsa-2729 - http://www.mandriva.com/security/advisories?name=MDVSA-2014:244
CVE ID: CVE-2013-4136 State: PUBLISHED Published: 2013-09-30T19:00:00Z Last Updated: 2024-09-17T03:38:39.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phusion/passenger/blob/release-4.0.6/NEWS - https://code.google.com/p/phusion-passenger/issues/detail?id=910 - https://github.com/phusion/passenger/commit/5483b3292cc2af1c83033eaaadec20dba4dcfd9b - http:
nger/issues/detail?id=910 - https://github.com/phusion/passenger/commit/5483b3292cc2af1c83033eaaadec20dba4dcfd9b - http://rhn.redhat.com/errata/RHSA-2013-1136.html - http://www.openwall.com/lists/oss-security/2013/07/16/6
CVE ID: CVE-2013-4137 State: PUBLISHED Published: 2013-10-11T22:00:00Z Last Updated: 2024-09-17T03:07:53.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format." Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/07/18/5 - http://status.net/2013/07/16/security-alert-sql-injection-attack-for-statusnet-1-0-x-and-1-1-x
CVE ID: CVE-2013-4138 State: PUBLISHED Published: 2013-08-28T15:00:00Z Last Updated: 2024-09-16T18:45:11.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any article type content" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2038363 - https://drupal.org/node/2038189 - http://www.openwall.com/lists/oss-security/2013/07/17/1
CVE ID: CVE-2013-4139 State: PUBLISHED Published: 2013-08-28T15:00:00Z Last Updated: 2024-09-16T17:23:32.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Stage File Proxy module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to cause a denial of service (file operations performance degradation and failure) via a large number of requests. Additional Analyst Notes: - CVE Program Container: References: - https://drupal.org/node/2038799 - https://drupal.org/node/2038801 - http://www.openwall.com/lists/oss-security/2013/07/17/1
CVE ID: CVE-2013-4140 State: PUBLISHED Published: 2013-07-29T22:00:00 Last Updated: 2024-08-06T16:30:49.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the TinyBox (Simple Splash) module before 7.x-2.2 for Drupal allows remote authenticated users with the "administer tinybox" permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95153 - http://www.securityfocus.com/bid/61078 - https://drupal.org/node/2031575 - http://seclists.org/fulldisclosure/2013/Jul/86 - http://secunia.com/advisories/54091 - http://www.openwall.com/lists/oss-se
p://seclists.org/fulldisclosure/2013/Jul/86 - http://secunia.com/advisories/54091 - http://www.openwall.com/lists/oss-security/2013/07/17/1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85600 - https://drupal.org/node/2038807
CVE ID: CVE-2013-4141 State: REJECTED Published: 2013-07-18T16:00:00Z Last Updated: 2024-09-17T00:20:56.336Z Description: No description available.
CVE ID: CVE-2013-4142 State: REJECTED Published: 2013-10-01T20:00:00Z Last Updated: 2024-09-17T02:42:58.212Z Description: No description available.
CVE ID: CVE-2013-4143 State: PUBLISHED Published: 2014-05-30T14:00:00 Last Updated: 2024-08-06T16:30:49.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to invalid salts. Additional Analyst Notes: - CVE Program Container: References: - http://www.tux.org/~bagleyd/xlock/xlockmore.README - http://openwall.com/lists/oss-security/2013/07/18/6 - http://openwall.com/lists/oss-security/2013/0
k/xlockmore.README - http://openwall.com/lists/oss-security/2013/07/18/6 - http://openwall.com/lists/oss-security/2013/07/16/8
CVE ID: CVE-2013-4144 State: PUBLISHED Published: 2022-06-30T17:21:21 Last Updated: 2024-08-06T16:30:50.105Z Vendors: n/a Products: swfupload wordpress plugin Problem Types: CWE-20 Description: There is an object injection vulnerability in swfupload plugin for wordpress. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wordpress/secure-swfupload/issues/1 - https://www.openwall.com/lists/oss-security/2013/07/18/10
CVE ID: CVE-2013-4145 State: REJECTED Published: 2014-04-27T01:00:00 Last Updated: 2014-04-27T00:57:00 Description: No description available.
CVE ID: CVE-2013-4146 State: REJECTED Published: 2022-06-30T12:36:24 Last Updated: 2022-06-30T12:36:24 Description: No description available.
CVE ID: CVE-2013-4147 State: PUBLISHED Published: 2013-08-09T21:00:00 Last Updated: 2024-08-06T16:30:49.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in a request in the (1) log_msg function in log.c or (2) version or (3) build_version function in version.c. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714612 - http://cxsecurity.com/issue/WLB-2013070028 - http://osvdb.org/95518 - http://
ian.org/cgi-bin/bugreport.cgi?bug=714612 - http://cxsecurity.com/issue/WLB-2013070028 - http://osvdb.org/95518 - http://seclists.org/oss-sec/2013/q3/145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85892
CVE ID: CVE-2013-4148 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:30:50.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0743.html - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0744.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=71f7fe48e10a8437c9d42d85
/rhn.redhat.com/errata/RHSA-2014-0744.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=71f7fe48e10a8437c9d42d859389f37157f59980 - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4149 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:30:50.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large MAC table. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0927.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=98f93ddd84800f207889491e0b5d8513
/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=98f93ddd84800f207889491e0b5d851386b459cf
CVE ID: CVE-2013-4150 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:30:50.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors in which the value of curr_queues is greater than max_queues, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0927.html - http://lists.fedoraproject.org/pipermail/package-
-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0927.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html - http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=eea750a5623ddac7a61982eec8f1c93481857578
CVE ID: CVE-2013-4151 State: PUBLISHED Published: 2014-11-04T21:00:00 Last Updated: 2024-08-06T16:30:49.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0743.html - http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=cc45995294b92d95319b4782750a3580cabdbc0c - http://lists.nongnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0744.html - http://lists
gnu.org/archive/html/qemu-stable/2014-07/msg00187.html - http://rhn.redhat.com/errata/RHSA-2014-0744.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133345.html
CVE ID: CVE-2013-4152 State: PUBLISHED Published: 2014-01-23T21:00:00 Last Updated: 2024-08-06T16:30:49.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/s
n XML External Entity (XXE) issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spring-projects/spring-framework/pull/317/files - http://www.gopivotal.com/security/cve-2013-4152 - http://www.securityfocus.com/bid/61951 - http://seclists.org/fulldisclosure/2013/Nov/14 - http://rhn.redhat.com/errata/RHSA-2014-0254.html - http://seclists.org/bugtraq/2013/Aug/154 - http://www.debian.org/security/2014/dsa-2842 - http://rhn.redhat.com/errata/RHSA-2014-0212.html - http://rhn.redhat.com/errata/RHSA-2014-0400.html - http://rhn.redhat.com/errata/RHSA-2014-0245.html - http://secunia.com/advisories/57915 - https://jira.springsource.org/browse/SPR-10806 - http://sec
/RHSA-2014-0245.html - http://secunia.com/advisories/57915 - https://jira.springsource.org/browse/SPR-10806 - http://secunia.com/advisories/56247
CVE ID: CVE-2013-4153 State: PUBLISHED Published: 2013-09-30T21:00:00Z Last Updated: 2024-08-06T16:30:50.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6 through 1.1.0 allows remote attackers to cause a denial of service (daemon crash) via a cpu count request, as demonstrated by the "virsh vcpucount dom --guest" command. Additional Analyst Notes: - CVE Program Container: References: - http://libvirt.org/news.html - https://bugzilla.redhat.com/show_bug.cgi?id=984821 - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=dfc692350a04a70b4ca65667c30869b3bfdaf034 - https://bugzill
21 - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=dfc692350a04a70b4ca65667c30869b3bfdaf034 - https://bugzilla.redhat.com/show_bug.cgi?id=986383 - http://openwall.com/lists/oss-security/2013/07/19/11
CVE ID: CVE-2013-4154 State: PUBLISHED Published: 2013-09-30T21:00:00Z Last Updated: 2024-08-06T16:30:50.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to "agent based cpu (un)plug," as demonstrated by the "virsh vcpucount foobar --guest" command. Additional Analyst Notes: - CVE Program Container: References: - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=96518d4316b711c72205117f8d5c967d5127bbb6 - http://libvirt.org/news.html - https://bugzilla.redhat.com/show_bug
tdiff%3Bh=96518d4316b711c72205117f8d5c967d5127bbb6 - http://libvirt.org/news.html - https://bugzilla.redhat.com/show_bug.cgi?id=984821 - https://bugzilla.redhat.com/show_bug.cgi?id=986386 - http://openwall.com/lists/oss-security/2013/07/19/12
CVE ID: CVE-2013-4155 State: PUBLISHED Published: 2013-08-20T22:00:00 Last Updated: 2024-08-06T16:30:50.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/swift/+bug/1196932 - http://www.debian.org/security/2012/dsa-2737 - https://review.openstack.org/#/c/40646/ - http://www.openwall.com/lists/oss-security/2013/08/07/6 - http://www.ubuntu.com/us
s://review.openstack.org/#/c/40646/ - http://www.openwall.com/lists/oss-security/2013/08/07/6 - http://www.ubuntu.com/usn/USN-2001-1 - https://review.openstack.org/#/c/40645/ - https://review.openstack.org/#/c/40643/ - http://rhn.redhat.com/errata/RHSA-2013-1197.html
CVE ID: CVE-2013-4156 State: PUBLISHED Published: 2013-07-31T10:00:00Z Last Updated: 2024-09-17T03:39:06.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted element in an OOXML document file. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/95706 - http://seclists.org/bugtraq/2013/Jul/174 - http://www.openoffice.org/security/cves/CVE-2013-4156.html
CVE ID: CVE-2013-4157 State: PUBLISHED Published: 2013-10-04T17:00:00Z Last Updated: 2024-08-06T16:30:49.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks.list, (3) bricks.err, or (4) limits.conf files in /tmp. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=986516 - http://rhn.redhat.com/errata/RHSA-2013-1205.html
CVE ID: CVE-2013-4158 State: PUBLISHED Published: 2019-12-11T12:45:34 Last Updated: 2024-08-06T16:30:50.040Z Vendors: smokeping Products: smokeping Problem Types: XSS flaw (incomplete fix for CVE-2012-0790) Description: smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790) Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4158 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4158 - https://access.redhat.com/security/cve/cve-2013-4158 - http://www.securityfocus.com/bid/61371 - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113987.html - http://lists.fedoraproject.org/pipermail/package-
fedoraproject.org/pipermail/package-announce/2013-August/113987.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114008.html - http://www.openwall.com/lists/oss-security/2013/07/20/2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85887
CVE ID: CVE-2013-4159 State: PUBLISHED Published: 2014-08-06T18:00:00 Last Updated: 2024-08-06T16:30:50.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=986773 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:177 - http://lists.opensuse.org/opensuse-updates/2014-06
3 - http://www.mandriva.com/security/advisories?name=MDVSA-2015:177 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00052.html - http://www.openwall.com/lists/oss-security/2014/05/29/12 - http://advisories.mageia.org/MGASA-2014-0274.html - http://wiki.samba.org/index.php/CTDB2releaseNotes#ctdb_2.5 - https://git.samba.org/?p=ctdb.git%3Ba=commitdiff%3Bh=b9b9f6738fba5c32e87cb9c36b358355b444fb9b
CVE ID: CVE-2013-4160 State: PUBLISHED Published: 2014-01-21T18:00:00 Last Updated: 2024-08-06T16:30:50.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to (1) cmsStageAllocLabV2ToV4curves, (2) cmsPipelineDup, (3) cmsAllocProfileSequenceDescription, (4) CurvesAlloc, and (5) cmsnamed. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2013/07/18/7 - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-July/023895.html - http://www.u
s/oss-security/2013/07/18/7 - http://mail.openjdk.java.net/pipermail/distro-pkg-dev/2013-July/023895.html - http://www.ubuntu.com/usn/USN-1911-1 - https://github.com/mm2/Little-CMS/commit/91c2db7f2559be504211b283bc3a2c631d6f06d9 - https://bugzilla.novell.com/show_bug.cgi?id=826097#c9 - http://openwall.com/lists/oss-security/2013/07/22/1
CVE ID: CVE-2013-4161 State: PUBLISHED Published: 2019-12-31T18:13:46 Last Updated: 2024-08-06T16:30:50.076Z Vendors: gksu-polkit-0.0.3-6.fc18 Products: gksu-polkit-0.0.3-6.fc18 Problem Types: Other Description: gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-4161 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4161 - https://access.redhat.com/security/cve/cve-2013-4161 - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113182.html - http://list
rity/cve/cve-2013-4161 - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113182.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113218.html
CVE ID: CVE-2013-4162 State: PUBLISHED Published: 2013-07-28T18:00:00 Last Updated: 2024-08-06T16:30:49.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1436.html - http://www.ubuntu.com/usn/USN-1943-1 - http://www.openwall.com/lists/oss-security/2