Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
evision&revision=52463 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=52458 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9248 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-openwire.c?r1=52463&r2=52462&pathrev=52463 - http://www.wireshark.org/security/wnpa-sec-2013-64.html - http://lists.opensuse.org/opensuse-updates/2013-11/msg00026.html - http://rhn.redhat.com/errata/RHSA-2014-0342.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19086 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-openwire.c?r1=52458&r2=52457&pathrev=52458
CVE ID: CVE-2013-6340 State: PUBLISHED Published: 2013-11-04T15:00:00 Last Updated: 2024-08-06T17:39:00.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly determine the amount of remaining data, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9263 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00027.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=52570 - http://
.org/opensuse-updates/2013-11/msg00027.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=52570 - http://www.debian.org/security/2013/dsa-2792 - http://lists.opensuse.org/opensuse-updates/2013-11/msg00026.html - http://www.wireshark.org/security/wnpa-sec-2013-65.html - http://rhn.redhat.com/errata/RHSA-2014-0342.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-tcp.c?r1=52570&r2=52569&pathrev=52570 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19298
CVE ID: CVE-2013-6341 State: PUBLISHED Published: 2013-12-05T18:00:00 Last Updated: 2024-08-06T17:39:01.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0140.html - http://www.exploit-db.com/exploits/30013 - https://www.htbridge.com/advisory/HTB23181 - http://packetstormsecurity.com/files/124201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/89265
CVE ID: CVE-2013-6342 State: PUBLISHED Published: 2013-11-22T15:00:00 Last Updated: 2024-08-06T17:39:01.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Tweet Blender plugin before 4.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tb_tab_index parameter to wp-admin/options-general.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-11/0072.html - http://secunia.com/advisories/55780 - http://wordpress.org/plugins/tweet-blender/changelog - https://www.htbridge.com/advisory/HTB23180
CVE ID: CVE-2013-6343 State: PUBLISHED Published: 2014-01-22T02:00:00 Last Updated: 2024-08-06T17:39:01.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in web.c in httpd on the ASUS RT-N56U and RT-AC66U routers with firmware 3.0.0.4.374_979 allow remote attackers to execute arbitrary code via the (1) apps_name or (2) apps_flag parameter to APP_Installation.asp. Additional Analyst Notes: - CVE Program Container: References: - http://infosec42.blogspot.com/2014/01/exploit-asus-rt-n56u-remote-root-shell.html - http://osvdb.org/102267 - https://support.t-mobile.com/docs/DOC-21994 - http://www.exploit-db.com/exploits/31033 - http://www.securityfocus.com/b
https://support.t-mobile.com/docs/DOC-21994 - http://www.exploit-db.com/exploits/31033 - http://www.securityfocus.com/bid/65046
CVE ID: CVE-2013-6344 State: PUBLISHED Published: 2013-11-02T20:00:00Z Last Updated: 2024-09-16T18:19:04.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows attackers to conduct cross-frame scripting attacks via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7012027
CVE ID: CVE-2013-6345 State: PUBLISHED Published: 2013-11-02T20:00:00Z Last Updated: 2024-09-16T20:32:14.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 has unknown impact and attack vectors related to an "Application Exception." Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7012027
CVE ID: CVE-2013-6346 State: PUBLISHED Published: 2013-11-02T20:00:00Z Last Updated: 2024-09-17T01:20:41.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the ZCC page in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7012027
CVE ID: CVE-2013-6347 State: PUBLISHED Published: 2013-11-02T20:00:00Z Last Updated: 2024-09-16T18:14:21.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4 allows remote attackers to hijack web sessions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/kb/doc.php?id=7012027
CVE ID: CVE-2013-6348 State: PUBLISHED Published: 2013-11-02T21:00:00 Last Updated: 2024-08-06T17:39:00.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.3.15.3 allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to (1) actionNames.action and (2) showConfig.action in config-browser/. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/99047 - http://packetstormsecurity.com/files/123805/Struts-2.3.15.3-Cross-Site-Scripting.html - http://www.securitytracker.com/id/1029266 - http://osvdb.org/99048 - http://en.wooyun.org/bugs/wooyun-2013-034?259
tml - http://www.securitytracker.com/id/1029266 - http://osvdb.org/99048 - http://en.wooyun.org/bugs/wooyun-2013-034?2592 - http://seclists.org/fulldisclosure/2013/Oct/244
CVE ID: CVE-2013-6349 State: PUBLISHED Published: 2013-11-02T21:00:00Z Last Updated: 2024-09-17T04:04:30.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee Email Gateway (MEG) 7.0 before 7.0.4 and 7.5 before 7.5.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/98669 - https://kc.mcafee.com/corporate/index?page=content&id=SB10057
CVE ID: CVE-2013-6355 State: REJECTED Published: 2017-10-17T14:00:00 Last Updated: 2017-10-17T16:57:01 Description: No description available.
CVE ID: CVE-2013-6356 State: REJECTED Published: 2013-12-09T18:00:00 Last Updated: 2013-12-09T18:57:00 Description: No description available.
CVE ID: CVE-2013-6357 State: PUBLISHED Published: 2013-11-13T15:00:00Z Last Updated: 2024-09-16T17:23:14.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Manager application in Apache Tomcat 5.5.25 and earlier allows remote attackers to hijack the authentication of administrators for requests that manipulate application deployment via the POST method, as demonstrated by a /manager/html/undeploy?path= URI. NOTE: the vendor disputes the significance of this report, stating that "the Apache Tomcat Security team has not accepted any reports of CSRF attacks against the Manager application ... as they require a reckless system a
eam has not accepted any reports of CSRF attacks against the Manager application ... as they require a reckless system administrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.webapp-security.com/wp-content/uploads/2013/11/Apache-Tomcat-5.5.25-CSRF-Vulnerabilities.txt
CVE ID: CVE-2013-6358 State: PUBLISHED Published: 2020-01-23T14:23:59 Last Updated: 2024-08-06T17:39:01.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the module/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://web.archive.org/web/20150423041900/http://labs.davidsopas.com/2013/10/how-salesman-could-hack-prestashop.html
CVE ID: CVE-2013-6359 State: PUBLISHED Published: 2013-12-13T17:00:00 Last Updated: 2024-08-06T17:39:00.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2013/dsa-2815 - http://munin-monitoring.org/ticket/1397 - http://www.ubuntu.com/usn/USN-2090-1 - https://github.com/munin-monitoring/munin/blob/2.0.18/ChangeLog
CVE ID: CVE-2013-6360 State: PUBLISHED Published: 2020-02-13T22:56:07 Last Updated: 2024-08-06T17:39:01.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: TRENDnet TS-S402 has a backdoor to enable TELNET. Additional Analyst Notes: - CVE Program Container: References: - http://firmware.re/usenixsec14/ - http://firmware.re/vulns/acsa-2013-014.php
CVE ID: CVE-2013-6362 State: PUBLISHED Published: 2020-02-13T22:54:28 Last Updated: 2024-08-06T17:39:01.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts. Additional Analyst Notes: - CVE Program Container: References: - http://firmware.re/usenixsec14/ - http://firmware.re/vulns/acsa-2013-005.php
CVE ID: CVE-2013-6364 State: PUBLISHED Published: 2019-11-05T13:43:51 Last Updated: 2024-08-06T17:39:00.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-6364 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6364 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6364 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0012.html - http://www.exploit-db.com/exploits/29519 - https://www.securityfocus.com/archive/1/529589
CVE ID: CVE-2013-6365 State: PUBLISHED Published: 2019-11-05T13:53:25 Last Updated: 2024-08-06T17:39:01.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-6365 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6365 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-6365 - http://archives.neohapsis.com/archives/bugtraq/2013-11/0013.html - https://www.securityfocus.com/archive/1/529590 - https://packetstormsecurity.com/files/cve/CVE-2013-6365
CVE ID: CVE-2013-6366 State: PUBLISHED Published: 2013-11-04T15:00:00Z Last Updated: 2024-09-16T22:51:59.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime().exec call. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/28962/
CVE ID: CVE-2013-6367 State: PUBLISHED Published: 2013-12-14T18:00:00 Last Updated: 2024-08-06T17:39:01.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via crafted modifications of the TMICT value. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1
ml - http://www.ubuntu.com/usn/USN-2138-1 - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.openwall.com/lists/oss-security/2013/12/12/12 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b963a22e6d1a266a67e9eecc88134713fd54775c - http://www.securityfocus.com/bid/64270 - https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.54 - http://www.ubuntu.com/usn/USN-2110-1 - http://www.ubuntu.com/usn/USN-2129-1 - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2128-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.ubuntu.com/usn/USN-2117-1 - http://rhn.redhat.com/errata/RHSA-2013-1801.html - https:
tu.com/usn/USN-2139-1 - http://www.ubuntu.com/usn/USN-2117-1 - http://rhn.redhat.com/errata/RHSA-2013-1801.html - https://bugzilla.redhat.com/show_bug.cgi?id=1032207 - http://www.ubuntu.com/usn/USN-2109-1 - http://rhn.redhat.com/errata/RHSA-2014-0284.html - http://rhn.redhat.com/errata/RHSA-2014-0163.html - https://github.com/torvalds/linux/commit/b963a22e6d1a266a67e9eecc88134713fd54775c - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html
CVE ID: CVE-2013-6368 State: PUBLISHED Published: 2013-12-14T18:00:00 Last Updated: 2024-08-06T17:39:01.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2135-1 - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.ubuntu.com/usn/USN-2138-1 - https://github.com/torvalds/linux/commit/fda4e2e85589191b123d31cdc21fd33ee70f50fd - http://www.ubuntu.com/usn/USN-2113-
https://github.com/torvalds/linux/commit/fda4e2e85589191b123d31cdc21fd33ee70f50fd - http://www.ubuntu.com/usn/USN-2113-1 - http://www.ubuntu.com/usn/USN-2141-1 - http://www.openwall.com/lists/oss-security/2013/12/12/12 - http://www.securityfocus.com/bid/64291 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fda4e2e85589191b123d31cdc21fd33ee70f50fd - http://www.ubuntu.com/usn/USN-2136-1 - http://www.ubuntu.com/usn/USN-2139-1 - http://www.ubuntu.com/usn/USN-2134-1 - http://www.ubuntu.com/usn/USN-2117-1 - http://rhn.redhat.com/errata/RHSA-2013-1801.html - http://www.ubuntu.com/usn/USN-2133-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1032210 - http://rhn.red
-1801.html - http://www.ubuntu.com/usn/USN-2133-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1032210 - http://rhn.redhat.com/errata/RHSA-2014-0284.html - http://rhn.redhat.com/errata/RHSA-2014-0163.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html
CVE ID: CVE-2013-6369 State: PUBLISHED Published: 2014-04-11T14:00:00 Last Updated: 2024-08-06T17:39:01.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1032273 - http://secunia.com/advisories/57731 - https://www.cl.cam.ac.uk/~mgk25/jbigkit/CHANGES - http://www.securityfocus.com/bid/66697
CVE ID: CVE-2013-6370 State: PUBLISHED Published: 2014-04-21T14:00:00 Last Updated: 2024-08-06T17:39:01.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:079 - https://bugzilla.redhat.com/show_bug.cgi?id=1032322 - http://secunia.com/advisories/57791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92540 - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html - https://github.com/json-c/js
/92540 - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html - https://github.com/json-c/json-c/commit/64e36901a0614bf64a19bc3396469c66dcd0b015 - http://www.securityfocus.com/bid/66720 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2013-6371 State: PUBLISHED Published: 2014-04-21T14:00:00 Last Updated: 2024-08-06T17:39:01.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2014:079 - https://bugzilla.redhat.com/show_bug.cgi?id=1032311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/92541 - http://secunia.com/advisories/57791 - http://www.securityfocus.com/bid/66715 - http://lists.fedoraproject.org/pipe
541 - http://secunia.com/advisories/57791 - http://www.securityfocus.com/bid/66715 - http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html - https://github.com/json-c/json-c/commit/64e36901a0614bf64a19bc3396469c66dcd0b015 - http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
CVE ID: CVE-2013-6372 State: PUBLISHED Published: 2014-05-08T14:00:00 Last Updated: 2024-08-06T17:39:01.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20 - https://bugzilla.redhat.com/show_bug.cgi?id=1032391 - https://github.com/jenkinsci/subversion-plugin/commit/7d4562d6f7e40de04bbe29577b51c79f07d05ba6
CVE ID: CVE-2013-6373 State: PUBLISHED Published: 2013-11-25T19:00:00 Last Updated: 2024-08-06T17:39:01.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20 - https://wiki.jenkins-ci.org/display/JENKINS/Exclusion-Plugin
CVE ID: CVE-2013-6374 State: PUBLISHED Published: 2013-11-25T19:00:00 Last Updated: 2024-08-06T17:39:01.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20 - https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer - http://secunia.com/advisories/55783 - http://osvdb.org/100106
CVE ID: CVE-2013-6375 State: PUBLISHED Published: 2013-11-23T11:00:00 Last Updated: 2024-08-06T17:39:01.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter." Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://www.openwall.com/lists/oss-security/2013/11/21/1 - http://www.securitytracker.com/id/1029369 - http://lis
3.xml - http://www.openwall.com/lists/oss-security/2013/11/21/1 - http://www.securitytracker.com/id/1029369 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html - http://www.openwall.com/lists/oss-security/2013/11/20/3
CVE ID: CVE-2013-6376 State: PUBLISHED Published: 2013-12-14T18:00:00 Last Updated: 2024-08-06T17:39:01.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: The recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (host OS crash) via a crafted ICR write operation in x2apic mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2113-1 - http://www.openwall.com/lists/oss-security/2013/12/12/12 - http://www.ubuntu.com/usn/USN-2136-1 - https://github.com/torvalds/linux/commit/17d68b763f09a9ce824ae23eb62c9efc57b69271 - http://www.ubun
com/usn/USN-2136-1 - https://github.com/torvalds/linux/commit/17d68b763f09a9ce824ae23eb62c9efc57b69271 - http://www.ubuntu.com/usn/USN-2117-1 - http://www.securityfocus.com/bid/64319 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=17d68b763f09a9ce824ae23eb62c9efc57b69271 - https://bugzilla.redhat.com/show_bug.cgi?id=1033106 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html
CVE ID: CVE-2013-6377 State: REJECTED Published: 2013-11-22T11:00:00 Last Updated: 2013-11-23T18:10:04 Description: No description available.
CVE ID: CVE-2013-6378 State: PUBLISHED Published: 2013-11-27T02:00:00 Last Updated: 2024-08-06T17:39:01.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service (OOPS) by leveraging root privileges for a zero-length write operation. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html - http://www.ubuntu.com/usn/USN-2065-1 - https://github.com/torvalds/linux/commit/a497e47d4aec37aaf8f13509f3ef3d1f6a717d88 - http://www.openwall.com/lists/oss-security/2013/
ub.com/torvalds/linux/commit/a497e47d4aec37aaf8f13509f3ef3d1f6a717d88 - http://www.openwall.com/lists/oss-security/2013/11/22/5 - http://www.ubuntu.com/usn/USN-2115-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a497e47d4aec37aaf8f13509f3ef3d1f6a717d88 - http://secunia.com/advisories/59262 - http://www.ubuntu.com/usn/USN-2116-1 - http://www.ubuntu.com/usn/USN-2114-1 - http://secunia.com/advisories/59309 - https://bugzilla.redhat.com/show_bug.cgi?id=1033578 - http://secunia.com/advisories/59406 - http://www.ubuntu.com/usn/USN-2070-1 - http://linux.oracle.com/errata/ELSA-2014-0771.html - http://www.ubuntu.com/usn/USN-2112-1 - http://www.ubuntu.com/usn/USN-2