Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1771 State: PUBLISHED Published: 2019-11-07T22:05:43 Last Updated: 2024-08-06T15:13:32.811Z Vendors: monkey Products: monkey Problem Types: Insecure Permissions Description: The web server Monkeyd produces a world-readable log (/var/log/monkeyd/master.log) on gentoo. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-1771 - http://www.openwall.com/lists/oss-security/2013/02/26/10
CVE ID: CVE-2013-1772 State: PUBLISHED Published: 2013-02-28T19:00:00 Last Updated: 2024-08-06T15:13:32.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log_prefix function in kernel/printk.c in the Linux kernel 3.x before 3.4.33 does not properly remove a prefix string from a syslog header, which allows local users to cause a denial of service (buffer overflow and system crash) by leveraging /dev/kmsg write access and triggering a call_console_drivers function call. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/ce0030c00f95cf9110d9cdcd41e901e1fb814417 - http://lists.opensuse.org/opensuse-security-announce/2013-07
lds/linux/commit/ce0030c00f95cf9110d9cdcd41e901e1fb814417 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - http://www.openwall.com/lists/oss-security/2013/02/26/9 - https://bugzilla.redhat.com/show_bug.cgi?id=916075 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.33
CVE ID: CVE-2013-1773 State: PUBLISHED Published: 2013-02-28T19:00:00 Last Updated: 2024-08-06T15:13:32.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the utf8 mount option, which is not properly handled during UTF-8 to UTF-16 conversion. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=916115 - http://rhn.redhat.com/errata/RHSA-2013-0928.html - http://www.openwall.com/lists/oss-security/2013/02/26/8 - ht
916115 - http://rhn.redhat.com/errata/RHSA-2013-0928.html - http://www.openwall.com/lists/oss-security/2013/02/26/8 - https://github.com/torvalds/linux/commit/0720a06a7518c9d0c0125bd5d1f3b6264c55c3dd - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0720a06a7518c9d0c0125bd5d1f3b6264c55c3dd - http://www.exploit-db.com/exploits/23248/ - http://rhn.redhat.com/errata/RHSA-2013-0744.html - http://www.kernel.org/pub/linux/kernel/v3.x/patch-3.3.bz2 - http://www.securityfocus.com/bid/58200 - http://www.osvdb.org/88310 - http://rhn.redhat.com/errata/RHSA-2013-1026.html
CVE ID: CVE-2013-1774 State: PUBLISHED Published: 2013-02-28T19:00:00 Last Updated: 2024-08-06T15:13:32.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chase_port function in drivers/usb/serial/io_ti.c in the Linux kernel before 3.7.4 allows local users to cause a denial of service (NULL pointer dereference and system crash) via an attempted /dev/ttyUSB read or write operation on a disconnected Edgeport USB serial converter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00018.html - https://bugzilla.redhat.com/show_bug.cgi?id=916191 - http://www.ubuntu.com/usn/USN-1805-1 - http://www.ubuntu
018.html - https://bugzilla.redhat.com/show_bug.cgi?id=916191 - http://www.ubuntu.com/usn/USN-1805-1 - http://www.ubuntu.com/usn/USN-1808-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1ee0a224bc9aad1de496c795f96bc6ba2c394811 - https://github.com/torvalds/linux/commit/1ee0a224bc9aad1de496c795f96bc6ba2c394811 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html - http://www.openwall.com/lists/oss-security/2013/02/27/29 - http://rhn.redhat.com/errata/RHSA-2013-0744.html - http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html - http://xor
announce/2013-06/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html - http://xorl.wordpress.com/2013/05/18/cve-2013-1774-linux-kernel-edgeport-usb-serial-converter-null-pointer-dereference/ - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.4
CVE ID: CVE-2013-1775 State: PUBLISHED Published: 2013-03-04T21:00:00 Last Updated: 2024-08-06T15:13:32.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.securityfocus.com/bid/58203 - http://www.sudo.ws/repos/sudo/rev/ddf399e3e306 - http://www.sudo.ws/sudo/alerts
http://www.securityfocus.com/bid/58203 - http://www.sudo.ws/repos/sudo/rev/ddf399e3e306 - http://www.sudo.ws/sudo/alerts/epoch_ticket.html - http://osvdb.org/90677 - http://rhn.redhat.com/errata/RHSA-2013-1701.html - http://www.debian.org/security/2013/dsa-2642 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html - http://www.ubuntu.com/usn/USN-1754-1 - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.517440 - http://www.openwall.com/lists/oss-security/2013/02/27/22 - http://rhn.redhat.
urity&y=2013&m=slackware-security.517440 - http://www.openwall.com/lists/oss-security/2013/02/27/22 - http://rhn.redhat.com/errata/RHSA-2013-1353.html - https://support.apple.com/kb/HT205031 - http://www.sudo.ws/repos/sudo/rev/ebd6cc75020f - http://support.apple.com/kb/HT5880
CVE ID: CVE-2013-1776 State: PUBLISHED Published: 2013-04-08T17:00:00 Last Updated: 2024-08-06T15:13:33.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions. Addi
ities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://www.securityfocus.com/bid/58207 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701839 - http://www.debian.org/security/2013/dsa-2642 - http://www.sudo.ws/repos/sudo/rev/6b22be4d09f0 - http://www.sudo.ws/repos/sudo/rev/632f8e028191 - http://www.openwall.com/lists/oss-security/2013/02/27/31 - http://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html - http://www.sudo.ws/sudo/alerts/tty_tickets.html - http://lists.ap
.opensuse.org/opensuse-updates/2013-03/msg00066.html - http://www.sudo.ws/sudo/alerts/tty_tickets.html - http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.517440 - https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/87023 - http://rhn.redhat.com/errata/RHSA-2013-1353.html - https://support.apple.com/kb/HT205031 - https://bugzilla.redhat.com/show_bug.cgi?id=916365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82453
CVE ID: CVE-2013-1777 State: PUBLISHED Published: 2013-07-11T22:00:00 Last Updated: 2024-08-06T15:13:32.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI classloader, which allows remote attackers to execute arbitrary code by using the JMX connector to send a crafted serialized object. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21643282 - https://issues.apache.org/jira/browse/GERONIMO-6477 - http://archives.neoh
ibm.com/support/docview.wss?uid=swg21643282 - https://issues.apache.org/jira/browse/GERONIMO-6477 - http://archives.neohapsis.com/archives/bugtraq/2013-07/0008.html - http://geronimo.apache.org/30x-security-report.html
CVE ID: CVE-2013-1778 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T18:39:00.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/creative.git/commitdiff/465367c - http://drupal.org/node/1929474 - http://drupal.org/node/1929380 - http://www.openwall.com/lists/oss-security/2013/02/28/3
CVE ID: CVE-2013-1779 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-17T03:44:24.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1723316 - http://drupal.org/node/1929482 - http://drupalcode.org/project/fresh.git/commitdiff/08a3ccb - http://www.openwall.com/lists/oss-security/2013/02/28/3
CVE ID: CVE-2013-1780 State: PUBLISHED Published: 2013-03-27T21:00:00 Last Updated: 2024-08-06T15:13:32.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Best Responsive Theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/90690 - http://www.securityfocus.com/bid/58213 - http://www.openwall.com/lists/oss-security/2013/02/28/3 - http://drupalcode.org/project/best_responsive.git/commitdiff/5972126 - http://secunia.com/a
/oss-security/2013/02/28/3 - http://drupalcode.org/project/best_responsive.git/commitdiff/5972126 - http://secunia.com/advisories/52421 - http://drupal.org/node/1929484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/82469 - http://drupal.org/node/1929390
CVE ID: CVE-2013-1781 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-17T01:40:42.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/professional_theme.git/commitdiff/e3fa6a2 - http://www.openwall.com/lists/oss-security/2013/02/28/3 - http://drupal.org/node/1730768 - http://drupalcode.org/project/professional_theme.
com/lists/oss-security/2013/02/28/3 - http://drupal.org/node/1730768 - http://drupalcode.org/project/professional_theme.git/commitdiff/0640ddc - http://drupal.org/node/1929486
CVE ID: CVE-2013-1782 State: PUBLISHED Published: 2013-03-27T21:00:00 Last Updated: 2024-08-06T15:13:32.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1929488 - http://drupalcode.org/project/responsive_blog.git/commitdiff/ce47de9 - http://www.securityfocus.com/bid/58218 - http://www.openwall.com/lists/oss-security/2013/02/28/3 - http://osvdb
e47de9 - http://www.securityfocus.com/bid/58218 - http://www.openwall.com/lists/oss-security/2013/02/28/3 - http://osvdb.org/90688 - http://secunia.com/advisories/52423 - http://drupal.org/node/1929396
CVE ID: CVE-2013-1783 State: PUBLISHED Published: 2013-03-27T21:00:00 Last Updated: 2024-08-06T15:13:33.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme before 7.x-1.8 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/52424 - http://www.securityfocus.com/bid/58216 - http://drupal.org/node/1929496 - http://osvdb.org/90685 - http://drupalcode.org/project/business.git/commitdiff/02f08
- http://drupal.org/node/1929496 - http://osvdb.org/90685 - http://drupalcode.org/project/business.git/commitdiff/02f081f - https://exchange.xforce.ibmcloud.com/vulnerabilities/82460 - http://www.openwall.com/lists/oss-security/2013/02/28/3 - http://drupal.org/node/1723246
CVE ID: CVE-2013-1784 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-17T02:06:59.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Clean Theme before 7.x-1.3 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1723532 - http://drupal.org/node/1929500 - http://www.openwall.com/lists/oss-security/2013/02/28/3 - http://drupalcode.org/project/clean_theme.git/commitdiff/ff2da6f - http://drupalcode.org/project/
ecurity/2013/02/28/3 - http://drupalcode.org/project/clean_theme.git/commitdiff/ff2da6f - http://drupalcode.org/project/clean_theme.git/commitdiff/697f839
CVE ID: CVE-2013-1785 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T17:03:24.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Premium Responsive theme before 7.x-1.6 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1929508 - http://drupalcode.org/project/responsive.git/commitdiff/1c6fa91 - http://www.openwall.com/lists/oss-security/2013/02/28/3 - http://drupal.org/node/1730752 - http://drupalcode.
/1c6fa91 - http://www.openwall.com/lists/oss-security/2013/02/28/3 - http://drupal.org/node/1730752 - http://drupalcode.org/project/responsive.git/commitdiff/6b593ff
CVE ID: CVE-2013-1786 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-17T03:18:54.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Company theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupalcode.org/project/company.git/commitdiff/9ddac7e - http://drupal.org/node/1724232 - http://drupalcode.org/project/company.git/commitdiff/d9a99da - http://www.openwall.com/lists/oss-security/2013/02/28/3 - ht
p://drupalcode.org/project/company.git/commitdiff/d9a99da - http://www.openwall.com/lists/oss-security/2013/02/28/3 - http://drupal.org/node/1929512
CVE ID: CVE-2013-1787 State: PUBLISHED Published: 2013-03-27T21:00:00Z Last Updated: 2024-09-16T19:41:34.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Simple Corporate theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/1929514 - http://drupal.org/node/1730786 - http://www.openwall.com/lists/oss-security/2013/02/28/3 - http://drupalcode.org/project/corporate.git/commitdiff/679a1d3
CVE ID: CVE-2013-1788 State: PUBLISHED Published: 2013-04-09T20:00:00 Last Updated: 2024-08-06T15:13:33.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc. Additional Analyst Notes: - CVE Program Container: References: - http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=957aa252912cde85d76c41e9710b33425a82b696 - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html - http://www.m
6c41e9710b33425a82b696 - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:143 - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html - http://ubuntu.com/usn/usn-1785-1 - https://bugzilla.redhat.com/show_bug.cgi?id=917108 - http://j00ru.vexillium.org/?p=1507 - http://www.debian.org/security/2013/dsa-2719 - http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=0388837f01bc467045164f9ddaff787000a8caaa - http://secunia.com/advisories/52846 - http://www.openwall.com/lists/oss-security/2013/02/28/8 - http://www.openwall.com/lists/oss-security/2013/02/28/4 - http
http://www.openwall.com/lists/oss-security/2013/02/28/8 - http://www.openwall.com/lists/oss-security/2013/02/28/4 - http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=e14b6e9c13d35c9bd1e0c50906ace8e707816888 - http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=bbc2d8918fe234b7ef2c480eb148943922cc0959 - http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=8b6dc55e530b2f5ede6b9dfb64aafdd1d5836492
CVE ID: CVE-2013-1789 State: PUBLISHED Published: 2013-04-09T20:00:00Z Last Updated: 2024-09-16T20:16:57.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html - http://ubuntu.com/usn/usn-1785-
tml - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html - http://ubuntu.com/usn/usn-1785-1 - http://j00ru.vexillium.org/?p=1507 - https://bugzilla.redhat.com/show_bug.cgi?id=917109 - http://secunia.com/advisories/52846 - http://www.openwall.com/lists/oss-security/2013/02/28/8 - http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=a205e71a2dbe0c8d4f4905a76a3f79ec522eacec - http://www.openwall.com/lists/oss-security/2013/02/28/4 - http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=a9b8ab4657dec65b8b86c225d12c533ad7e984e2
CVE ID: CVE-2013-1790 State: PUBLISHED Published: 2013-04-09T20:00:00 Last Updated: 2024-08-06T15:13:33.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100090.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:143 - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html - http://ubuntu.com/usn/usn-178
3:143 - http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html - http://ubuntu.com/usn/usn-1785-1 - https://bugzilla.redhat.com/show_bug.cgi?id=917111 - http://j00ru.vexillium.org/?p=1507 - http://www.debian.org/security/2013/dsa-2719 - http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=b1026b5978c385328f2a15a2185c599a563edf91 - http://secunia.com/advisories/52846 - http://www.openwall.com/lists/oss-security/2013/02/28/8 - http://www.openwall.com/lists/oss-security/2013/02/28/4
CVE ID: CVE-2013-1791 State: REJECTED Published: 2021-08-19T15:36:36 Last Updated: 2021-08-19T15:36:36 Description: No description available.
CVE ID: CVE-2013-1792 State: PUBLISHED Published: 2013-03-22T10:00:00 Last Updated: 2024-08-06T15:13:32.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) via crafted keyctl system calls that trigger keyring operations in simultaneous threads. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1796-1 - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - https://github.com/torvalds/linux/commit/0da9dfdd2cd
sts.opensuse.org/opensuse-security-announce/2013-07/msg00018.html - https://github.com/torvalds/linux/commit/0da9dfdd2cd9889201bc6f6f43580c99165cd087 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:176 - http://www.ubuntu.com/usn/USN-1797-1 - http://www.ubuntu.com/usn/USN-1788-1 - http://www.openwall.com/lists/oss-security/2013/03/07/1 - http://www.ubuntu.com/usn/USN-1793-1 - http://www.ubuntu.com/usn/USN-1792-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=0da9dfdd2cd9889201bc6f6f43580c99165cd087 - https://bugzilla.redhat.com/show_bug.cgi?id=916646 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.3 - http://www.ubuntu.com/usn/USN-
om/show_bug.cgi?id=916646 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.3 - http://www.ubuntu.com/usn/USN-1794-1 - http://rhn.redhat.com/errata/RHSA-2013-0744.html - http://www.ubuntu.com/usn/USN-1795-1 - http://www.ubuntu.com/usn/USN-1787-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://www.ubuntu.com/usn/USN-1798-1
CVE ID: CVE-2013-1793 State: PUBLISHED Published: 2019-12-10T13:17:03 Last Updated: 2024-08-06T15:13:33.095Z Vendors: openstack-utils Products: openstack-db program Problem Types: openstack-db insecure password creation for services Description: openstack-utils openstack-db has insecure password creation Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-1793 - https://access.redhat.com/security/cve/cve-2013-1793