Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-4105 State: PUBLISHED Published: 2019-11-04T16:27:30 Last Updated: 2024-08-06T16:30:50.087Z Vendors: Cryptocat Products: Cryptocat Problem Types: Plaintext Traffic Disclosure Description: Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://www.securityfocus.com/bid/61110
CVE ID: CVE-2013-4106 State: PUBLISHED Published: 2019-11-14T19:56:24 Last Updated: 2024-08-06T16:30:49.966Z Vendors: Cryptocat Products: Cryptocat Problem Types: Overview Nickname XSS Description: A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://www.securityfocus.com/bid/61099 - https://vuldb.com/pl/?id.9433
CVE ID: CVE-2013-4107 State: PUBLISHED Published: 2019-11-05T12:47:12 Last Updated: 2024-08-06T16:30:50.026Z Vendors: Cryptocat Products: Cryptocat Problem Types: Nickname Change XSS Description: Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://vuldb.com/?id.9442 - https://www.securityfocus.com/bid/61096
CVE ID: CVE-2013-4108 State: PUBLISHED Published: 2019-11-14T19:14:44 Last Updated: 2024-08-06T16:30:50.043Z Vendors: Cryptocat Products: Cryptocat Problem Types: Unspecified Minor Issues Description: Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php
CVE ID: CVE-2013-4109 State: PUBLISHED Published: 2019-11-14T19:00:37 Last Updated: 2024-08-06T16:30:50.083Z Vendors: Cryptocat Products: Message Handling Problem Types: Handling Unspecified XSS Description: An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://www.securityfocus.com/bid/61097 - https://vuldb.com/es/?id.9445
CVE ID: CVE-2013-4110 State: PUBLISHED Published: 2019-11-05T12:51:50 Last Updated: 2024-08-06T16:30:49.899Z Vendors: Cryptocat Products: Cryptocat Problem Types: User List Disclosure Description: Cryptocat has an Unspecified Chat Participant User List Disclosure Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2013/07/10/15 - https://tobtu.com/decryptocat.php - https://www.securityfocus.com/bid/61117 - https://vuldb.com/?id.9446
CVE ID: CVE-2013-4111 State: PUBLISHED Published: 2013-08-28T17:00:00 Last Updated: 2024-08-06T16:30:49.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate and allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54525 - http://secunia.com/advisories/54313 - http://www.ubuntu
m Container: References: - http://secunia.com/advisories/54525 - http://secunia.com/advisories/54313 - http://www.ubuntu.com/usn/USN-2004-1 - http://rhn.redhat.com/errata/RHSA-2013-1200.html - https://bugs.launchpad.net/ossa/+bug/1192229 - http://lists.opensuse.org/opensuse-updates/2013-08/msg00019.html - https://github.com/openstack/python-glanceclient/blob/master/doc/source/index.rst
CVE ID: CVE-2013-4112 State: PUBLISHED Published: 2013-09-28T19:00:00 Last Updated: 2024-08-06T16:30:50.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2014-0029.html - http://rhn.redhat.com/errata/RHSA-2013-1209.html - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://rhn.redhat.com/errata/RHSA-2013-1207.html - http://rhn.redhat.com/errata/RHSA-2
.com/errata/RHSA-2013-1437.html - http://rhn.redhat.com/errata/RHSA-2013-1207.html - http://rhn.redhat.com/errata/RHSA-2013-1208.html - https://bugzilla.redhat.com/show_bug.cgi?id=983489 - http://rhn.redhat.com/errata/RHSA-2013-1771.html
CVE ID: CVE-2013-4113 State: PUBLISHED Published: 2013-07-13T10:00:00 Last Updated: 2024-08-06T16:30:49.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted document that is processed by the xml_parse_into_struct function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54071 - http://rhn.redhat.com/errata/RHSA-2013-1061.html - http://secunia.com/advisories/54165 - http://secunia.com/advisories/54104 - http://lists.opensu
ta/RHSA-2013-1061.html - http://secunia.com/advisories/54165 - http://secunia.com/advisories/54104 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00007.html - http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=7d163e8a0880ae8af2dd869071393e5dc07ef271 - http://www.debian.org/security/2013/dsa-2723 - http://secunia.com/advisories/54163 - https://bugs.php.net/bug.php?id=65236 - http://www.ubuntu.com/usn/USN-1905-1 - http://rhn.redhat.com/errata/RHSA-2013-1062.html - http://support.apple.com/kb/HT6150 - http://php.net/ChangeLog-5.php - http://rhn.redhat.com/errata/RHSA-2013-1050.html - http://rhn.redhat.com/errata/RHSA-2013-1049.html - http://rhn.redhat.com/errata/RHSA-2013-1063
ata/RHSA-2013-1050.html - http://rhn.redhat.com/errata/RHSA-2013-1049.html - http://rhn.redhat.com/errata/RHSA-2013-1063.html - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html - http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html - https://bugzilla.redhat.com/show_bug.cgi?id=983689 - http://php.net/archive/2013.php#id2013-07-11-1
CVE ID: CVE-2013-4114 State: PUBLISHED Published: 2013-08-16T17:00:00Z Last Updated: 2024-09-16T17:44:11.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/07/11/7 - http://secunia.com/advisories/54072 - https://bugs.gentoo.org/show_bug.cgi?id=476538 - https://bugzilla.redhat.com/show_bug.cgi?id=983673 - http://nagstamon.ifw-dresden.de/docs/security/ -
ug.cgi?id=476538 - https://bugzilla.redhat.com/show_bug.cgi?id=983673 - http://nagstamon.ifw-dresden.de/docs/security/ - http://lists.opensuse.org/opensuse-updates/2013-07/msg00072.html - http://secunia.com/advisories/54276
CVE ID: CVE-2013-4115 State: PUBLISHED Published: 2013-08-09T22:00:00 Last Updated: 2024-08-06T16:30:50.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10487.patch - http://www.squid-cache.org/Advisories/SQUID-2013_2.txt - http://secunia.com/advisories/54076 - http://lists.opensuse.org/opensuse-security-
che.org/Advisories/SQUID-2013_2.txt - http://secunia.com/advisories/54076 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00010.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00030.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00033.html - http://secunia.com/advisories/54834 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00032.html - http://www.squid-cache.org/Versions/v3/3.3/changesets/squid-3.3-12587.patch - http://www.securityfocus.com/bid/61111 - http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11823.patch - http://secunia.com/advisories/54839 - http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9200.patc
.patch - http://secunia.com/advisories/54839 - http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9200.patch - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00040.html - http://lists.opensuse.org/opensuse-updates/2013-09/msg00024.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/85564 - http://lists.opensuse.org/opensuse-updates/2013-09/msg00025.html - http://www.openwall.com/lists/oss-security/2013/07/11/8
CVE ID: CVE-2013-4116 State: PUBLISHED Published: 2014-04-22T14:00:00 Last Updated: 2024-08-06T16:30:49.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/61083 - https://bugzilla.redhat.com/show_bug.cgi?id=983917 - http://www.openwall.com/lists/oss-security/2013/07/11/9 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=715325 - https://github.com/npm/npm/issues/3635 - https:/
13/07/11/9 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=715325 - https://github.com/npm/npm/issues/3635 - https://github.com/npm/npm/commit/f4d31693 - http://www.openwall.com/lists/oss-security/2013/07/10/17 - https://exchange.xforce.ibmcloud.com/vulnerabilities/87141
CVE ID: CVE-2013-4117 State: PUBLISHED Published: 2013-07-16T10:00:00 Last Updated: 2024-08-06T16:30:50.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/94805 - http://openwall.com/lists/oss-security/2013/07/11/11 - http://exploit.iedb.ir/exploits-177.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/85395 - http://www.securityfocus.com/bid/60905 - http://packetstormsecurity.
xchange.xforce.ibmcloud.com/vulnerabilities/85395 - http://www.securityfocus.com/bid/60905 - http://packetstormsecurity.com/files/122259/WordPress-Category-Grid-View-Gallery-XSS.html - http://seclists.org/bugtraq/2013/Jul/17
CVE ID: CVE-2013-4118 State: PUBLISHED Published: 2016-10-03T21:00:00 Last Updated: 2024-08-06T16:30:49.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/07/11/12 - http://www.openwall.com/lists/oss-security/2013/07/12/2 - http://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html - http://lists.opensuse.org/opensuse-updates/2016-09/msg00102.html - http://www.securityfocus.com/bid/61072 - https://github.com/Fr
sts.opensuse.org/opensuse-updates/2016-09/msg00102.html - http://www.securityfocus.com/bid/61072 - https://github.com/FreeRDP/FreeRDP/commit/7d58aac24fe20ffaad7bd9b40c9ddf457c1b06e7
CVE ID: CVE-2013-4119 State: PUBLISHED Published: 2016-10-03T21:00:00 Last Updated: 2024-08-06T16:30:49.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by disconnecting before authentication has finished. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2013/07/11/12 - http://www.openwall.com/lists/oss-security/2013/07/12/2 - https://github.com/FreeRDP/FreeRDP/commit/0773bb9303d24473fe1185d85a424dfe159aff53 - http://www.securityfocus.com/bid/61072
CVE ID: CVE-2013-4120 State: PUBLISHED Published: 2019-12-10T14:32:37 Last Updated: 2024-08-06T16:30:50.046Z Vendors: Katello Products: Katello Problem Types: DoS in API OAuth authentication Description: Katello has a Denial of Service vulnerability in API OAuth authentication Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4120 - https://access.redhat.com/security/cve/cve-2013-4120
CVE ID: CVE-2013-4121 State: REJECTED Published: 2014-05-01T10:00:00 Last Updated: 2014-05-01T03:57:00 Description: No description available.
CVE ID: CVE-2013-4122 State: PUBLISHED Published: 2013-10-27T00:00:00 Last Updated: 2024-08-06T16:30:50.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://git.cyrusimap.org/cyrus-sasl/commit/?id=dedad73e5e7a75d01a5f3d
lyst Notes: - CVE Program Container: References: - http://git.cyrusimap.org/cyrus-sasl/commit/?id=dedad73e5e7a75d01a5f3d5a6702ab8ccd2ff40d - https://www.linuxquestions.org/questions/slackware-14/%5Bslackware-current%5D-glibc-2-17-shadow-and-other-penumbrae-4175461061/ - http://security.gentoo.org/glsa/glsa-201309-01.xml - http://www.ubuntu.com/usn/USN-2755-1 - http://www.openwall.com/lists/oss-security/2013/07/15/1 - http://www.openwall.com/lists/oss-security/2013/07/13/1 - http://www.openwall.com/lists/oss-security/2013/07/12/6 - http://www.openwall.com/lists/oss-security/2013/07/12/3 - http://www.debian.org/security/2015/dsa-3368
CVE ID: CVE-2013-4123 State: PUBLISHED Published: 2013-09-16T19:00:00Z Last Updated: 2024-09-17T03:48:39.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/54142 - http://www.squid-cache.org/Versions/v3/3.3/changesets/squid-3.3-12591.patch - http://www.squid-cache.org/Versions/v3/3.2/changesets/squid-3.2-11826.patch - http://secunia.com/advisories/54834 - http://www.squid-cache.org/Advisories/SQUID-2013_3.txt -
/squid-3.2-11826.patch - http://secunia.com/advisories/54834 - http://www.squid-cache.org/Advisories/SQUID-2013_3.txt - http://lists.opensuse.org/opensuse-updates/2013-09/msg00024.html
CVE ID: CVE-2013-4124 State: PUBLISHED Published: 2013-08-05T15:00:00 Last Updated: 2024-08-06T16:30:50.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=141660010015249&w=2 - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00012.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html - http://www.
/2013-08/msg00012.html - http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html - http://www.samba.org/samba/security/CVE-2013-4124 - http://marc.info/?l=bugtraq&m=141660010015249&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113591.html - http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00015.html - http://archives.neohapsis.com/archives/bugtraq/2013-08/0028.html - http://www.samba.org/samba/history/samba-4.0.8.html - http://www.samba.org/samba/history/samba-3.6.17.html - http://www.ubuntu.com/usn/USN-1966-1 - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://www.securitytracker.com/id/1028882 - http://rhn.red
1966-1 - http://security.gentoo.org/glsa/glsa-201502-15.xml - http://www.securitytracker.com/id/1028882 - http://rhn.redhat.com/errata/RHSA-2014-0305.html - http://www.samba.org/samba/history/samba-3.5.22.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/86185 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:207 - https://bugzilla.redhat.com/show_bug.cgi?id=984401 - http://lists.fedoraproject.org/pipermail/package-announce/2013-August/114011.html - http://secunia.com/advisories/54519 - http://rhn.redhat.com/errata/RHSA-2013-1310.html - http://ftp.samba.org/pub/samba/patches/security/samba-4.0.7-CVE-2013-4124.patch - http://rhn.redhat.com/errata/RHSA-2013-1542.html - ht
a.org/pub/samba/patches/security/samba-4.0.7-CVE-2013-4124.patch - http://rhn.redhat.com/errata/RHSA-2013-1542.html - http://osvdb.org/95969 - http://rhn.redhat.com/errata/RHSA-2013-1543.html
CVE ID: CVE-2013-4125 State: PUBLISHED Published: 2013-07-15T20:00:00 Last Updated: 2024-08-06T16:30:49.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fib6_add_rt2node function in net/ipv6/ip6_fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement (RA) messages in certain circumstances involving three routes that initially qualified for membership in an ECMP route set until a change occurred for one of the first two routes, which allows remote attackers to cause a denial of service (system crash) via a crafted sequence of messages. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject
rafted sequence of messages. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2013-July/112454.html - http://www.openwall.com/lists/oss-security/2013/07/15/4 - http://lists.fedoraproject.org/pipermail/package-announce/2013-July/112619.html - https://github.com/torvalds/linux/commit/307f2fb95e9b96b3577916e73d92e104f8f26494 - http://www.securityfocus.com/bid/61166 - https://bugzilla.redhat.com/show_bug.cgi?id=984664 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=307f2fb95e9b96b3577916e73d92e104f8f26494 - http://www.securitytracker.com/id/1028780 - https://exchange.xforce.ibmcloud.com/vu
b95e9b96b3577916e73d92e104f8f26494 - http://www.securitytracker.com/id/1028780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85645
CVE ID: CVE-2013-4126 State: REJECTED Published: 2022-06-29T18:48:14 Last Updated: 2022-06-29T18:48:14 Description: No description available.
CVE ID: CVE-2013-4127 State: PUBLISHED Published: 2013-07-28T18:00:00Z Last Updated: 2024-08-06T16:30:49.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the vhost_net_set_backend function in drivers/vhost/net.c in the Linux kernel through 3.10.3 allows local users to cause a denial of service (OOPS and system crash) via vectors involving powering on a virtual machine. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=980643 - https://github.com/torvalds/linux/commit/dd7633ecd553a5e304d349aa6f8eb8a0417098c5 - http://www.openwall.com/lists/oss-security/2013/07/15/7 - https://bugzilla.redh
7633ecd553a5e304d349aa6f8eb8a0417098c5 - http://www.openwall.com/lists/oss-security/2013/07/15/7 - https://bugzilla.redhat.com/show_bug.cgi?id=984722 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=dd7633ecd553a5e304d349aa6f8eb8a0417098c5
CVE ID: CVE-2013-4128 State: PUBLISHED Published: 2013-08-16T16:00:00 Last Updated: 2024-08-06T16:30:50.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1152.html - http://osvdb.org/96217 - http://secunia.com/advisories/54508 - http://rhn.redhat.com/errata/RHSA-2013-1437.html - http://www.securitytracker.com/id/1028898 - http://rhn.redhat.com/errata/RHSA-2013-1151.html - https://exchan
437.html - http://www.securitytracker.com/id/1028898 - http://rhn.redhat.com/errata/RHSA-2013-1151.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/86386 - https://bugzilla.redhat.com/show_bug.cgi?id=984795
CVE ID: CVE-2013-4129 State: PUBLISHED Published: 2013-07-28T18:00:00 Last Updated: 2024-08-06T16:30:50.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bridge multicast implementation in the Linux kernel through 3.10.3 does not check whether a certain timer is armed before modifying the timeout value of that timer, which allows local users to cause a denial of service (BUG and system crash) via vectors involving the shutdown of a KVM virtual machine, related to net/bridge/br_mdb.c and net/bridge/br_multicast.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=984743 - https://github.com/torvalds/linux/commit/c7e8
tainer: References: - https://bugzilla.redhat.com/show_bug.cgi?id=984743 - https://github.com/torvalds/linux/commit/c7e8e8a8f7a70b343ca1e0f90a31e35ab2d16de1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/85763 - http://www.openwall.com/lists/oss-security/2013/07/16/1 - http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c7e8e8a8f7a70b343ca1e0f90a31e35ab2d16de1 - http://www.securityfocus.com/bid/61193
CVE ID: CVE-2013-4130 State: PUBLISHED Published: 2013-08-20T22:00:00 Last Updated: 2024-08-06T16:30:49.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform ring loops, which might allow remote attackers to cause a denial of service (reachable assertion and server exit) by triggering a network error. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1260.html - http://cgit.freedesktop.org/spice/spice/commit/?id=53488f0275d6c8a121af49f7ac817d09ce68090d - http://seclists.org/o
ml - http://cgit.freedesktop.org/spice/spice/commit/?id=53488f0275d6c8a121af49f7ac817d09ce68090d - http://seclists.org/oss-sec/2013/q3/115 - http://www.ubuntu.com/usn/USN-1926-1 - http://www.debian.org/security/2014/dsa-2839 - https://bugzilla.redhat.com/show_bug.cgi?id=984769