Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-2212 State: PUBLISHED Published: 2013-08-28T17:00:00 Last Updated: 2024-08-06T15:27:41.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service (CPU consumption and possibly hypervisor or guest kernel panic) via a crafted GFN range. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201504-04 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html - http://www.openwall.com/lists/oss-security/2013/07/24/6 - http://lists.opensuse.org/op
-announce/2014-03/msg00011.html - http://www.openwall.com/lists/oss-security/2013/07/24/6 - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
CVE ID: CVE-2013-2213 State: PUBLISHED Published: 2020-02-11T19:19:46 Last Updated: 2024-08-06T15:27:41.113Z Vendors: n/a Products: KDE Paste Applet Problem Types: Insufficient Random Number Generation Description: The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms by predicting the generator output. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=978243 - http://openwall.com/lists/oss-security/2013/06/13/1 - http://openwall.com/lists
illa.redhat.com/show_bug.cgi?id=978243 - http://openwall.com/lists/oss-security/2013/06/13/1 - http://openwall.com/lists/oss-security/2013/06/26/2
CVE ID: CVE-2013-2214 State: PUBLISHED Published: 2014-02-10T23:00:00 Last Updated: 2024-08-06T15:27:41.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup (1) overview, (2) summary, or (3) grid style in status.cgi. NOTE: this behavior is by design in most 3.x versions, but the upstream vendor "decided to change it for Nagios 4" and 3.5.1. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-
ge it for Nagios 4" and 3.5.1. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2013/q2/622 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00029.html - http://seclists.org/oss-sec/2013/q2/619 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00031.html - http://tracker.nagios.org/view.php?id=456
CVE ID: CVE-2013-2215 State: REJECTED Published: 2013-12-10T11:00:00 Last Updated: 2013-12-10T02:57:00 Description: No description available.
CVE ID: CVE-2013-2216 State: REJECTED Published: 2022-06-27T16:12:10 Last Updated: 2022-06-27T16:12:10 Description: No description available.
CVE ID: CVE-2013-2217 State: PUBLISHED Published: 2013-09-23T20:00:00 Last Updated: 2024-08-06T15:27:41.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2008-1 - https://bugzilla.redhat.com/show_bug.cgi?id=978696 - http://www.openwall.com/lists/oss-security/2013/06/27/8 - http://lists.opensuse.org/opensuse-updates/2013-07/msg00062.html
CVE ID: CVE-2013-2218 State: PUBLISHED Published: 2013-09-30T21:00:00Z Last Updated: 2024-08-06T15:27:41.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the virConnectListAllInterfaces method in interface/interface_backend_netcf.c in libvirt 1.0.6 allows remote attackers to cause a denial of service (libvirtd crash) via a filtering flag that causes an interface to be skipped, as demonstrated by the "virsh iface-list --inactive" command. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=980112 - http://libvirt.org/news.html - http://www.openwall.com/lists/oss-security/2013/07/01/6 - http://
how_bug.cgi?id=980112 - http://libvirt.org/news.html - http://www.openwall.com/lists/oss-security/2013/07/01/6 - http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=244e0b8cf15ca2ef48d82058e728656e6c4bad11
CVE ID: CVE-2013-2219 State: PUBLISHED Published: 2013-07-31T10:00:00 Last Updated: 2024-08-06T15:27:41.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Red Hat Directory Server before 8.2.11-13 and 389 Directory Server do not properly restrict access to entity attributes, which allows remote authenticated users to obtain sensitive information via a search query for the attribute. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1119.html - https://bugzilla.redhat.com/show_bug.cgi?id=979508 - http://rhn.redhat.com/errata/RHSA-2013-1116.html
CVE ID: CVE-2013-2220 State: PUBLISHED Published: 2013-07-31T10:00:00Z Last Updated: 2024-09-16T20:59:13.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714362 - https://github.com/LawnGnome/php-radius/commit/13c149b051f82b709e8d7cc32111e84b49d57234 - http://www.debian.org/security/2013/dsa-2726 - http://pecl.php
-radius/commit/13c149b051f82b709e8d7cc32111e84b49d57234 - http://www.debian.org/security/2013/dsa-2726 - http://pecl.php.net/package/radius/1.2.7
CVE ID: CVE-2013-2221 State: PUBLISHED Published: 2013-10-04T17:00:00 Last Updated: 2024-08-06T15:27:41.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large packet. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html - https://github.com/wernerd/ZRTPCPP/commit/4654f330317c9948bb61d138eb24d49690ca4637 - http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html - http://secunia.com/advi
690ca4637 - http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html - http://secunia.com/advisories/54998 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html - http://security.gentoo.org/glsa/glsa-201309-13.xml - http://seclists.org/oss-sec/2013/q2/638 - http://secunia.com/advisories/53818
CVE ID: CVE-2013-2222 State: PUBLISHED Published: 2013-10-04T17:00:00 Last Updated: 2024-08-06T15:27:41.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ZRTP Hello packet to the (1) ZRtp::findBestSASType, (2) ZRtp::findBestAuthLen, (3) ZRtp::findBestCipher, (4) ZRtp::findBestHash, or (5) ZRtp::findBestPubKey functions. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html - https://github.com/wernerd/ZRTPCPP/commit/4654f330317c99
p://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html - https://github.com/wernerd/ZRTPCPP/commit/4654f330317c9948bb61d138eb24d49690ca4637 - http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html - http://secunia.com/advisories/54998 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html - http://security.gentoo.org/glsa/glsa-201309-13.xml - http://seclists.org/oss-sec/2013/q2/638 - http://secunia.com/advisories/53818
CVE ID: CVE-2013-2223 State: PUBLISHED Published: 2013-10-04T17:00:00 Last Updated: 2024-08-06T15:27:41.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (out-of-bounds read) via a crafted packet, as demonstrated by a truncated Ping packet that is not properly handled by the getEpHash function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2013-10/msg00053.html - https://github.com/wernerd/ZRTPCPP/commit/4654f330317c9948bb61d138eb24d49690ca4637 - http://blog.azimuthsecurity.com/201
https://github.com/wernerd/ZRTPCPP/commit/4654f330317c9948bb61d138eb24d49690ca4637 - http://blog.azimuthsecurity.com/2013/06/attacking-crypto-phones-weaknesses-in.html - http://secunia.com/advisories/54998 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00052.html - http://security.gentoo.org/glsa/glsa-201309-13.xml - http://seclists.org/oss-sec/2013/q2/638 - http://secunia.com/advisories/53818
CVE ID: CVE-2013-2224 State: PUBLISHED Published: 2013-07-04T21:00:00 Last Updated: 2024-08-06T15:27:41.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows local users to cause a denial of service (invalid free operation and system crash) or possibly gain privileges via a sendmsg system call with the IP_RETOPTS option, as demonstrated by hemlock.c. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-3552. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1166.html - https://bugzilla.redhat.com/show_bug.cgi?id=97
ntainer: References: - http://rhn.redhat.com/errata/RHSA-2013-1166.html - https://bugzilla.redhat.com/show_bug.cgi?id=979936 - http://rhn.redhat.com/errata/RHSA-2013-1173.html - http://www.openwall.com/lists/oss-security/2013/06/30/7 - http://rhn.redhat.com/errata/RHSA-2013-1450.html
CVE ID: CVE-2013-2225 State: PUBLISHED Published: 2014-05-27T15:00:00 Last Updated: 2024-08-06T15:27:41.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php. Additional Analyst Notes: - CVE Program Container: References: - https://forge.indepnet.net/projects/glpi/repository/revisions/21169/diff - http://osvdb.org/94683 - http://www.securityfocus.com/bid/60823 - http://seclists.org/oss-sec/2013/q2/626 - http://seclists.org/oss-sec/2013/q2/645 - http://www.exploit-db.com/exploits/26530
CVE ID: CVE-2013-2226 State: PUBLISHED Published: 2014-05-14T19:00:00 Last Updated: 2024-08-06T15:27:41.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) filename parameter to front/document.form.php, or (3) table parameter to ajax/comments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/60693 - http://www.glpi-project.org/spip.php?page=annonce&id_breve=297&lang=en&debut_autres_breves= - http://www.zeroscience.mk/en/vulnerabilitie
roject.org/spip.php?page=annonce&id_breve=297&lang=en&debut_autres_breves= - http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5146.php
CVE ID: CVE-2013-2227 State: PUBLISHED Published: 2019-11-01T16:50:29 Last Updated: 2024-08-06T15:27:41.087Z Vendors: INDEPNET Development Team Products: GLPI Problem Types: file inclusion Description: GLPI 0.83.7 has Local File Inclusion in common.tabs.php. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2227 - https://access.redhat.com/security/cve/cve-2013-2227 - http://www.openwall.com/lists/oss-security/2013/06/30/10 - http://www.securityfocus.com/bid/60692 - https://packetstormsecurity.com/files/122087/GLPI-0.83.7-Parameter-Traversal-Arbitrary-File-Access.html
CVE ID: CVE-2013-2228 State: PUBLISHED Published: 2019-12-03T13:55:48 Last Updated: 2024-08-06T15:27:41.098Z Vendors: SaltStack Products: SaltStack Problem Types: exponent of 1 Description: SaltStack RSA Key Generation allows remote users to decrypt communications Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2013-2228 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-2228 - http://www.openwall.com/lists/oss-security/2013/07/01/1 - https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-2228 - http://www.securityfocus.com/bid/60868 - http://www.securitytracker.com/id/1028717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
yfocus.com/bid/60868 - http://www.securitytracker.com/id/1028717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85372
CVE ID: CVE-2013-2229 State: REJECTED Published: 2013-09-26T10:00:00Z Last Updated: 2024-09-17T04:04:53.756Z Description: No description available.
CVE ID: CVE-2013-2230 State: PUBLISHED Published: 2013-09-30T21:00:00Z Last Updated: 2024-08-06T15:27:41.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qemu driver (qemu/qemu_driver.c) in libvirt before 1.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via unspecified vectors involving "multiple events registration." Additional Analyst Notes: - CVE Program Container: References: - http://libvirt.org/news.html - https://bugzilla.redhat.com/show_bug.cgi?id=981476 - http://www.openwall.com/lists/oss-security/2013/07/10/5 - http://libvirt.org/git/?p=libvirt.git%3Ba=commitdiff%3Bh=f38c8185f97720ecae7ef2291fbaa5d6b0209e17
CVE ID: CVE-2013-2231 State: PUBLISHED Published: 2013-10-01T17:00:00Z Last Updated: 2024-08-06T15:27:41.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1101.html - http://rhn.redhat.c
yst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1101.html - http://rhn.redhat.com/errata/RHSA-2013-1100.html - https://bugzilla.redhat.com/show_bug.cgi?id=980757
CVE ID: CVE-2013-2232 State: PUBLISHED Published: 2013-07-04T21:00:00 Last Updated: 2024-08-06T15:27:41.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip6_sk_dst_check function in net/ipv6/ip6_output.c in the Linux kernel before 3.10 allows local users to cause a denial of service (system crash) by using an AF_INET6 socket for a connection to an IPv4 interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1943-1 - http://rhn.redhat.com/errata/RHSA-2013-1166.html - http://www.openwall.com/lists/oss-security/2013/07/02/5 - http://www.ubuntu.com/usn/USN-1913-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.gi
ty/2013/07/02/5 - http://www.ubuntu.com/usn/USN-1913-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a963a37d384d71ad43b3e9e79d68d42fbe0901f3 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - http://www.ubuntu.com/usn/USN-1938-1 - http://www.ubuntu.com/usn/USN-1944-1 - http://www.ubuntu.com/usn/USN-1945-1 - http://rhn.redhat.com/errata/RHSA-2013-1173.html - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2 - http://www.debian.org/security/2013/dsa-2766 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - https://github.com/torvalds/linux/commit/a963a37d384d71ad43b3e9e79d68d42fbe0901f3 - http://lists.op
3-12/msg00129.html - https://github.com/torvalds/linux/commit/a963a37d384d71ad43b3e9e79d68d42fbe0901f3 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html - http://www.ubuntu.com/usn/USN-1947-1 - http://www.ubuntu.com/usn/USN-1941-1 - http://www.ubuntu.com/usn/USN-1942-1 - http://www.ubuntu.com/usn/USN-1912-1 - http://www.ubuntu.com/usn/USN-1946-1
CVE ID: CVE-2013-2233 State: PUBLISHED Published: 2018-05-04T20:00:00 Last Updated: 2024-08-06T15:27:41.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys. Additional Analyst Notes: - CVE Program Container: References: - https://www.ansible.com/security - https://bugzilla.redhat.com/show_bug.cgi?id=980821 - https://github.com/ansible/ansible/issues/857 - http://www.openwall.com/lists/oss-security/2013/07/01/2 - http://www.openwall.com/lists/oss-security/2013/07/02/6
CVE ID: CVE-2013-2234 State: PUBLISHED Published: 2013-07-04T21:00:00 Last Updated: 2024-08-06T15:27:41.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) key_notify_sa_flush and (2) key_notify_policy_flush functions in net/key/af_key.c in the Linux kernel before 3.10 do not initialize certain structure members, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify interface of an IPSec key_socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1943-1 - http://rhn.redhat.com/errata/RHSA-2013-1166.html - http://www.ubuntu.com/usn/USN-1913-1 - http://li
com/usn/USN-1943-1 - http://rhn.redhat.com/errata/RHSA-2013-1166.html - http://www.ubuntu.com/usn/USN-1913-1 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - https://github.com/torvalds/linux/commit/a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 - http://www.ubuntu.com/usn/USN-1938-1 - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://www.ubuntu.com/usn/USN-1944-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a5cc68f3d63306d0d288f31edfc2ae6ef8ecd887 - http://www.ubuntu.com/usn/USN-1945-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.10.bz2 - http://www.debian.org/security/2013/dsa-2766 - http://lists.opensuse.org/op
l.org/pub/linux/kernel/v3.x/patch-3.10.bz2 - http://www.debian.org/security/2013/dsa-2766 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html - http://www.ubuntu.com/usn/USN-1947-1 - http://www.openwall.com/lists/oss-security/2013/07/02/7 - https://bugzilla.redhat.com/show_bug.cgi?id=980995 - http://www.ubuntu.com/usn/USN-1941-1 - http://www.ubuntu.com/usn/USN-1942-1 - http://www.ubuntu.com/usn/USN-1912-1 - http://www.ubuntu.com/usn/USN-1946-1
CVE ID: CVE-2013-2235 State: REJECTED Published: 2022-06-29T18:42:10 Last Updated: 2022-06-29T18:45:31 Description: No description available.
CVE ID: CVE-2013-2236 State: PUBLISHED Published: 2013-10-24T01:00:00 Last Updated: 2024-08-06T15:27:41.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the new_msg_lsa_change_notify function in the OSPFD API (ospf_api.c) in Quagga before 0.99.22.2, when --enable-opaque-lsa and the -a command line option are used, allows remote attackers to cause a denial of service (crash) via a large LSA. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0794.html - http://www.securityfocus.com/bid/60955 - http://nongnu.mirrors.hostinginnederland.nl//quagga/quagga-0.99.22.3.changelog.txt - http://git.savanna
.com/bid/60955 - http://nongnu.mirrors.hostinginnederland.nl//quagga/quagga-0.99.22.3.changelog.txt - http://git.savannah.gnu.org/gitweb/?p=quagga.git%3Ba=commitdiff%3Bh=3f872fe60463a931c5c766dbf8c36870c0023e88 - http://lists.quagga.net/pipermail/quagga-dev/2013-July/010622.html - http://www.debian.org/security/2013/dsa-2803 - http://seclists.org/oss-sec/2013/q3/24 - http://www.ubuntu.com/usn/USN-2941-1
CVE ID: CVE-2013-2237 State: PUBLISHED Published: 2013-07-04T21:00:00 Last Updated: 2024-08-06T15:27:41.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel before 3.9 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify_policy interface of an IPSec key_socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1970-1 - http://rhn.redhat.com/errata/RHSA-2013-1166.html - http://www.openwall.com/lists/oss-security/2013/07/04/3 - http://www.ubu
p://rhn.redhat.com/errata/RHSA-2013-1166.html - http://www.openwall.com/lists/oss-security/2013/07/04/3 - http://www.ubuntu.com/usn/USN-1913-1 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00003.html - http://www.ubuntu.com/usn/USN-1995-1 - http://rhn.redhat.com/errata/RHSA-2013-1173.html - http://www.debian.org/security/2013/dsa-2766 - http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html - https://bugzilla.redhat.com/show_bug.cgi?id=981220 - http://www.ubuntu.com/usn/USN-1998-1 - http://lists.opensuse.org/opensuse-security-announce/2013-09/msg00004.html - http://www.ubuntu.com/usn/USN-1973-1 - http://www.ubuntu.com/usn/USN-1992-1 - https://github.com/torvalds
sg00004.html - http://www.ubuntu.com/usn/USN-1973-1 - http://www.ubuntu.com/usn/USN-1992-1 - https://github.com/torvalds/linux/commit/85dfb745ee40232876663ae206cba35f24ab2a40 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=85dfb745ee40232876663ae206cba35f24ab2a40 - http://www.ubuntu.com/usn/USN-1993-1 - https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.9.bz2 - http://www.ubuntu.com/usn/USN-1912-1 - http://www.ubuntu.com/usn/USN-1972-1
CVE ID: CVE-2013-2238 State: PUBLISHED Published: 2013-09-30T20:00:00Z Last Updated: 2024-09-16T23:06:34.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the index and substituted variables. Additional Analyst Notes: - CVE Program Container: References: - http://jira.freeswitch.org/browse/FS-5566 - http://www.openwall.com/lists/oss-security/2013/07/04/4
CVE ID: CVE-2013-2239 State: PUBLISHED Published: 2013-11-12T01:00:00 Last Updated: 2024-08-06T15:27:41.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: vzkernel before 042stab080.2 in the OpenVZ modification for the Linux kernel 2.6.32 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel stack memory via (1) a crafted ploop driver ioctl call, related to the ploop_getdevice_ioc function in drivers/block/ploop/dev.c, or (2) a crafted quotactl system call, related to the compat_quotactl function in fs/quota/quota.c. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.openvz.org/Download/kernel
s/quota/quota.c. Additional Analyst Notes: - CVE Program Container: References: - http://wiki.openvz.org/Download/kernel/rhel6-testing/042stab080.2 - http://www.debian.org/security/2013/dsa-2766 - https://bugs.gentoo.org/show_bug.cgi?id=475762 - https://security-tracker.debian.org/tracker/CVE-2013-2239 - http://openwall.com/lists/oss-security/2013/07/04/9