Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tes/2013-10/msg00051.html - http://rhn.redhat.com/errata/RHSA-2013-1282.html - http://www.openwall.com/lists/oss-security/2013/09/18/6 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00022.html - https://bugzilla.redhat.com/show_bug.cgi?id=1006677
CVE ID: CVE-2013-4327 State: PUBLISHED Published: 2013-10-03T21:00:00 Last Updated: 2024-08-06T16:38:01.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1961-1 - http://www.openwall.com/lists/oss-security/2013/09/18/6 - http://www.debian.org/security/2013/dsa-2777 - https://bugzilla.redhat.com/show_bu
com/lists/oss-security/2013/09/18/6 - http://www.debian.org/security/2013/dsa-2777 - https://bugzilla.redhat.com/show_bug.cgi?id=1006680
CVE ID: CVE-2013-4328 State: REJECTED Published: 2013-08-27T01:00:00Z Last Updated: 2024-09-17T03:02:19.496Z Description: No description available.
CVE ID: CVE-2013-4329 State: PUBLISHED Published: 2013-09-12T18:00:00 Last Updated: 2024-08-06T16:38:01.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capable PCI passthrough device before the IOMMU setup is complete, which allows local HVM guest domains to gain privileges or cause a denial of service via a DMA instruction. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/09/10/4 - http://lists.xen.org/archives/html/xen-devel/2013-07/msg00066.html - http://security.gentoo.org/glsa/glsa-201407-03.xml
http://lists.xen.org/archives/html/xen-devel/2013-07/msg00066.html - http://security.gentoo.org/glsa/glsa-201407-03.xml - http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html - http://www.debian.org/security/2014/dsa-3006
CVE ID: CVE-2013-4330 State: PUBLISHED Published: 2013-10-04T17:00:00 Last Updated: 2024-08-06T16:38:02.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (1) FILE or (2) FTP producer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54888 - http://seclists.org/fulldisclosure/2013/Sep/178 - http://rhn.redhat.com/errata/RHSA-2013-1862.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/87542 - http://rhn.redhat.
.redhat.com/errata/RHSA-2013-1862.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/87542 - http://rhn.redhat.com/errata/RHSA-2014-0140.html - http://rhn.redhat.com/errata/RHSA-2014-0124.html - http://rhn.redhat.com/errata/RHSA-2014-0254.html - http://osvdb.org/97941 - http://rhn.redhat.com/errata/RHSA-2014-0245.html - http://camel.apache.org/security-advisories.data/CVE-2013-4330.txt.asc?version=1&modificationDate=1380535446943 - http://packetstormsecurity.com/files/123454/ - https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d
ef31d%40%3Ccommits.camel.apache.org%3E - https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E
CVE ID: CVE-2013-4331 State: PUBLISHED Published: 2014-02-02T00:00:00 Last Updated: 2024-08-06T16:38:02.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Light Display Manager (aka LightDM) 1.4.x before 1.4.3, 1.6.x before 1.6.2, and 1.7.x before 1.7.14 uses 0664 permissions for the temporary .Xauthority file, which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/lightdm/%2Bbug/685212
CVE ID: CVE-2013-4332 State: PUBLISHED Published: 2013-10-09T22:00:00 Last Updated: 2024-08-06T16:38:01.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and earlier allow context-dependent attackers to cause a denial of service (heap corruption) via a large value to the (1) pvalloc, (2) valloc, (3) posix_memalign, (4) memalign, or (5) aligned_alloc functions. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1605.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4332 - http://secunia.com/advisories/55113 - http://www.ubunt
tml - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4332 - http://secunia.com/advisories/55113 - http://www.ubuntu.com/usn/USN-1991-1 - http://www.openwall.com/lists/oss-security/2013/09/12/6 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:284 - http://www.securityfocus.com/bid/62324 - https://security.gentoo.org/glsa/201503-04 - http://rhn.redhat.com/errata/RHSA-2013-1411.html - http://www.mandriva.com/security/advisories?name=MDVSA-2013:283 - https://sourceware.org/bugzilla/show_bug.cgi?id=15857 - https://sourceware.org/bugzilla/show_bug.cgi?id=15856 - https://sourceware.org/bugzilla/show_bug.cgi?id=15855
CVE ID: CVE-2013-4333 State: PUBLISHED Published: 2020-01-24T14:44:01 Last Updated: 2024-08-06T16:38:01.887Z Vendors: OpenPNE Products: OpenPNE Problem Types: XXE Description: OpenPNE 3 versions 3.8.7, 3.6.11, 3.4.21.1, 3.2.7.6, 3.0.8.5 has an External Entity Injection Vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87031 - http://www.openwall.com/lists/oss-security/2013/09/11/6
CVE ID: CVE-2013-4334 State: PUBLISHED Published: 2020-02-07T13:53:41 Last Updated: 2024-08-06T16:38:02.030Z Vendors: opWebAPIPlugin Products: opWebAPIPlugin Problem Types: XXE Description: opWebAPIPlugin 0.5.1, 0.4.0, and 0.1.0: XXE Vulnerabilities Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/09/11/6 - http://www.openpne.jp/archives/12091/
CVE ID: CVE-2013-4335 State: PUBLISHED Published: 2020-02-07T14:06:16 Last Updated: 2024-08-06T16:38:02.022Z Vendors: opOpenSocialPlugin Products: opOpenSocialPlugin Problem Types: XXE Description: opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/09/11/6 - http://www.securityfocus.com/bid/62287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87033
CVE ID: CVE-2013-4336 State: REJECTED Published: 2014-04-27T22:00:00 Last Updated: 2014-05-08T17:57:00 Description: No description available.
CVE ID: CVE-2013-4337 State: REJECTED Published: 2014-04-27T20:00:00 Last Updated: 2014-04-27T19:57:00 Description: No description available.
CVE ID: CVE-2013-4338 State: PUBLISHED Published: 2013-09-12T10:00:00 Last Updated: 2024-08-06T16:38:01.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116832.html - http://core.trac.wordpress.org/changeset/25325 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116828.html - http://www.debian.org/
et/25325 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116828.html - http://www.debian.org/security/2013/dsa-2757 - http://codex.wordpress.org/Version_3.6.1 - http://wordpress.org/news/2013/09/wordpress-3-6-1/ - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117118.html
CVE ID: CVE-2013-4339 State: PUBLISHED Published: 2013-09-12T10:00:00 Last Updated: 2024-08-06T16:38:01.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string. Additional Analyst Notes: - CVE Program Container: References: - http://core.trac.wordpress.org/changeset/25324 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116832.html - http://core.trac.wordpress.org/changeset/25323 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116828.html - http://www.o
rg/changeset/25323 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116828.html - http://www.osvdb.org/101181 - http://www.debian.org/security/2013/dsa-2757 - http://seclists.org/fulldisclosure/2013/Dec/174 - http://codex.wordpress.org/Version_3.6.1 - http://wordpress.org/news/2013/09/wordpress-3-6-1/ - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117118.html
CVE ID: CVE-2013-4340 State: PUBLISHED Published: 2013-09-12T10:00:00 Last Updated: 2024-08-06T16:38:01.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified user_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116832.html - http://core.trac.wordpress.org/changeset/25321 - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116828.html - http://www.debian.org/security/2013/dsa-2757 - ht
oraproject.org/pipermail/package-announce/2013-September/116828.html - http://www.debian.org/security/2013/dsa-2757 - http://codex.wordpress.org/Version_3.6.1 - http://wordpress.org/news/2013/09/wordpress-3-6-1/ - http://lists.fedoraproject.org/pipermail/package-announce/2013-September/117118.html
CVE ID: CVE-2013-4341 State: PUBLISHED Published: 2013-09-16T10:00:00 Last Updated: 2024-08-06T16:38:01.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-41623 - https://moodle.org/mod/forum/discuss.php?d=238399 - http://packetstormsecurity.com/files/164479/Moodle-Authenticated-Spelling-Binary-Remote-Co
/forum/discuss.php?d=238399 - http://packetstormsecurity.com/files/164479/Moodle-Authenticated-Spelling-Binary-Remote-Code-Execution.html
CVE ID: CVE-2013-4342 State: PUBLISHED Published: 2013-10-10T00:00:00 Last Updated: 2024-08-06T16:38:01.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root and makes it easier for remote attackers to gain privileges by leveraging another vulnerability in a service. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201611-06 - https://bugzilla.redhat.com/show_bug.cgi?id=1006100 - https://github.com/xinetd-org/xinetd/pull/10 - http://rhn.redhat.com/errata/RHSA-2013-1409.html
CVE ID: CVE-2013-4343 State: PUBLISHED Published: 2013-09-25T10:00:00 Last Updated: 2024-08-06T16:38:01.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in drivers/net/tun.c in the Linux kernel through 3.11.1 allows local users to gain privileges by leveraging the CAP_NET_ADMIN capability and providing an invalid tuntap interface name in a TUNSETIFF ioctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.spinics.net/lists/netdev/msg250066.html - http://rhn.redhat.com/errata/RHSA-2013-1490.html - https://bugzilla.redhat.com/show_bug.cgi?id=1007733 - http://www.ubuntu.com/usn/USN-2020-1 - http://marc.info/?l=linux-kern
ps://bugzilla.redhat.com/show_bug.cgi?id=1007733 - http://www.ubuntu.com/usn/USN-2020-1 - http://marc.info/?l=linux-kernel&m=137889490510745&w=2 - http://www.openwall.com/lists/oss-security/2013/09/12/3 - http://www.ubuntu.com/usn/USN-2049-1 - http://www.ubuntu.com/usn/USN-2023-1 - http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00071.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00048.html
CVE ID: CVE-2013-4344 State: PUBLISHED Published: 2013-10-04T17:00:00 Last Updated: 2024-08-06T16:38:01.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html - http://www.securityfocus.com/bid/62773 - http://article.gmane.org/gmane.comp.emulators.qemu/237191 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.
icle.gmane.org/gmane.comp.emulators.qemu/237191 - http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html - http://www.openwall.com/lists/oss-security/2013/10/02/2 - http://osvdb.org/98028 - http://rhn.redhat.com/errata/RHSA-2013-1754.html - http://rhn.redhat.com/errata/RHSA-2013-1553.html - http://www.ubuntu.com/usn/USN-2092-1
CVE ID: CVE-2013-4345 State: PUBLISHED Published: 2013-10-10T10:00:00 Last Updated: 2024-08-06T16:38:01.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the consumed data. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-2065-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1007690 - http://www.ubuntu.com/usn/USN-2110-1 - http://rhn.redhat.co
65-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1007690 - http://www.ubuntu.com/usn/USN-2110-1 - http://rhn.redhat.com/errata/RHSA-2013-1490.html - http://rhn.redhat.com/errata/RHSA-2013-1645.html - http://www.ubuntu.com/usn/USN-2076-1 - http://www.ubuntu.com/usn/USN-2158-1 - http://www.ubuntu.com/usn/USN-2070-1 - http://www.ubuntu.com/usn/USN-2071-1 - http://www.ubuntu.com/usn/USN-2109-1 - http://rhn.redhat.com/errata/RHSA-2013-1449.html - http://www.securityfocus.com/bid/62740 - http://www.ubuntu.com/usn/USN-2074-1 - http://www.ubuntu.com/usn/USN-2068-1 - http://marc.info/?l=linux-crypto-vger&m=137942122902845&w=2 - http://www.ubuntu.com/usn/USN-2072-1 - http://www.ubuntu.com/usn/USN-20
nfo/?l=linux-crypto-vger&m=137942122902845&w=2 - http://www.ubuntu.com/usn/USN-2072-1 - http://www.ubuntu.com/usn/USN-2075-1 - http://www.ubuntu.com/usn/USN-2064-1
CVE ID: CVE-2013-4346 State: PUBLISHED Published: 2014-05-20T14:00:00 Last Updated: 2024-08-06T16:38:01.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62386 - http://www.openwall.com/lists/oss-security/2013/09/12/7 - https://github.com/simplegeo/python-oauth2/issues/129
CVE ID: CVE-2013-4347 State: PUBLISHED Published: 2014-05-20T14:00:00 Last Updated: 2024-08-06T16:38:01.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/62388 - https://github.com/simplegeo/python-oauth2/issues/9 - http://www.openwall.com/lists/oss-security/2013/09/12/7 - https://github.com/simplegeo/python-oauth2/pull/146
CVE ID: CVE-2013-4348 State: PUBLISHED Published: 2013-11-04T11:00:00 Last Updated: 2024-08-06T16:38:01.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1490.html - https://bugzilla.redhat.com/show_bug.cgi?id=1007939 - http://www.ubuntu.com/usn/USN-2070-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://www.ub
w.ubuntu.com/usn/USN-2070-1 - http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html - http://www.ubuntu.com/usn/USN-2075-1 - https://git.kernel.org/cgit/linux/kernel/git/davem/net.git/commit/?id=6f092343855a71e03b8d209815d8c45bf3a27fcd
CVE ID: CVE-2013-4349 State: REJECTED Published: 2013-11-02T19:00:00Z Last Updated: 2024-09-16T17:48:55.415Z Description: No description available.
CVE ID: CVE-2013-4350 State: PUBLISHED Published: 2013-09-25T10:00:00 Last Updated: 2024-08-06T16:38:02.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/95ee62083cb6453e056562d91f597552021e6ae7 - http://www.ubuntu.com/usn/USN-2024-1 - http://www.openwall.com/lists/oss-security/2013/09/13/3 - http://rh
552021e6ae7 - http://www.ubuntu.com/usn/USN-2024-1 - http://www.openwall.com/lists/oss-security/2013/09/13/3 - http://rhn.redhat.com/errata/RHSA-2013-1490.html - http://www.ubuntu.com/usn/USN-2039-1 - http://www.ubuntu.com/usn/USN-2022-1 - http://www.ubuntu.com/usn/USN-2038-1 - http://www.ubuntu.com/usn/USN-2021-1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=95ee62083cb6453e056562d91f597552021e6ae7 - http://www.ubuntu.com/usn/USN-2019-1 - https://bugzilla.redhat.com/show_bug.cgi?id=1007872 - http://www.ubuntu.com/usn/USN-2049-1 - http://www.ubuntu.com/usn/USN-2045-1 - http://www.ubuntu.com/usn/USN-2050-1 - http://www.ubuntu.com/usn/USN-2041-1
CVE ID: CVE-2013-4351 State: PUBLISHED Published: 2013-10-10T00:00:00 Last Updated: 2024-08-06T16:38:01.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey. Additional Analyst Notes: - CVE Program Container: References: - http://thread.gmane.org/gmane.comp.encryption.gpg.devel/17712/focus=18138 - http://lists.opensuse.org/opensuse-updates/2013-10/msg00006.html - http://ubuntu.com/usn/usn-1987-1 - http://www.debian.org/
://lists.opensuse.org/opensuse-updates/2013-10/msg00006.html - http://ubuntu.com/usn/usn-1987-1 - http://www.debian.org/security/2013/dsa-2773 - http://www.openwall.com/lists/oss-security/2013/09/13/4 - http://rhn.redhat.com/errata/RHSA-2013-1459.html - http://lists.opensuse.org/opensuse-updates/2013-10/msg00003.html - http://www.debian.org/security/2013/dsa-2774 - https://bugzilla.redhat.com/show_bug.cgi?id=1010137
CVE ID: CVE-2013-4352 State: PUBLISHED Published: 2014-07-20T10:00:00 Last Updated: 2024-08-06T16:38:01.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value. Additional Analyst Notes: - CVE Program Container: References: - http://httpd.apache.org/security/vulnerabilities_24.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/cache/cache_storage.c - http://svn.apache
lnerabilities_24.html - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/cache/cache_storage.c - http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/cache/cache_storage.c?r1=1491564&r2=1523235&diff_format=h - https://bugzilla.redhat.com/show_bug.cgi?id=1120604 - https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa85
09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r83109088737656fa6307bd99ab40f8ff0269ae58d3f7272d7048494a%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - ht
lists.apache.org/thread.html/r9b4b963760a3cb5a4a70c902f325c6c0337fe51d5b8570416f8f8729%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9821b0a32a1d0a1b4947abb6f3630053fcbb2ec905d9a32c2bd4d4ee%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2013-4353 State: PUBLISHED Published: 2014-01-09T01:00:00 Last Updated: 2024-08-06T16:38:01.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake. Additional Analyst Notes: - CVE Program Container: References: - http://www.splunk.com/view/SP-CAAAMB3 - http://www.debian.org/security/2014/dsa-2837 - http://www-01.ibm.com/support/docview.wss?uid=isg400001843 - http://git.openssl.org/gitweb/?p=openssl.git%3Ba=blob_plain%3Bf=CHANGES%3