deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-6412
Published: 2014-01-23
Description: The transform_save function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files and allows local users to modify the files via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2014-0044.html; https://bugzilla.redhat.com/show_bug.cgi?id=1034261; https://github.com/hercules-team/augeas/commit/f5b4fc0c
CVE: CVE-2013-6447
Published: 2014-01-23
Description: Multiple XML External Entity (XXE) vulnerabilities in the (1) ExecutionHandler, (2) PollHandler, and (3) SubscriptionHandler classes in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allow remote attackers to read arbitrary files and possibly have other impacts via a crafted XML file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2014-0045.html; http://secunia.com/advisories/56572; http://www.securitytracker.com/id/1029652
CVE: CVE-2013-6448
Published: 2014-01-23
Description: The InterfaceGenerator handler in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allows remote attackers to bypass the WebRemote annotation restriction and obtain information about arbitrary classes and methods on the server classpath via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2014-0045.html; http://secunia.com/advisories/56572; http://www.securitytracker.com/id/1029652
CVE: CVE-2013-6443
Published: 2014-01-23
Description: CloudForms 3.0 Management Engine before 5.2.1.6 allows remote attackers to bypass the Ruby on Rails protect_from_forgery mechanism and conduct cross-site request forgery (CSRF) attacks via a destructive action in a request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://rhn.redhat.com/errata/RHSA-2014-0025.html; http://www.securitytracker.com/id/1029606; http://rhn.redhat.com/errata/RHSA-2014-0025.html
CVE: CVE-2014-0006
Published: 2014-01-23
Description: The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://rhn.redhat.com/errata/RHSA-2014-0232.html; http://www.openwall.com/lists/oss-security/2014/01/17/5; https://bugs.launchpad.net/swift/+bug/1265665
CVE: CVE-2014-0979
Published: 2014-01-23
Description: The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdm_greeter_get_authentication_user function, which allows local users to cause a denial of service (NULL pointer dereference) via an empty username.
CVSS Score: 2.1 (LOW)
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128117.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128150.html; http://lists.opensuse.org/opensuse-updates/2014-01/msg00048.html
CVE: CVE-2014-0675
Published: 2014-01-23
Description: The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-255
References: http://osvdb.org/102377; http://secunia.com/advisories/56621; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0675
CVE: CVE-2012-6447
Published: 2014-01-23
Description: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 5.0.0 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/93745; http://secunia.com/advisories/53623; http://www.securitytracker.com/id/1028605
CVE: CVE-2013-7306
Published: 2014-01-23
Description: The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: http://www.kb.cert.org/vuls/id/229804; http://www.kb.cert.org/vuls/id/BLUU-98MS25; http://www.kb.cert.org/vuls/id/229804
CVE: CVE-2013-7307
Published: 2014-01-23
Description: The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
CVSS Score: 5.4 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/229804; http://www.kb.cert.org/vuls/id/BLUU-97KQ2C; http://www.kb.cert.org/vuls/id/229804
CVE: CVE-2013-7308
Published: 2014-01-23
Description: The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
CVSS Score: 5.4 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/229804; http://www.kb.cert.org/vuls/id/BLUU-985QRV; http://www.kb.cert.org/vuls/id/229804
CVE: CVE-2013-7309
Published: 2014-01-23
Description: The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
CVSS Score: 5.4 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/229804; http://www.kb.cert.org/vuls/id/BLUU-985QSE; http://www.kb.cert.org/vuls/id/229804
CVE: CVE-2013-7310
Published: 2014-01-23
Description: The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
CVSS Score: 5.4 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/229804; http://www.kb.cert.org/vuls/id/CKIG-9AAHPZ; http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/VU96465452.html
CVE: CVE-2013-7311
Published: 2014-01-23
Description: The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
CVSS Score: 5.4 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/229804; http://www.kb.cert.org/vuls/id/BLUU-985QRC; https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94490
CVE: CVE-2013-7312
Published: 2014-01-23
Description: The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
CVSS Score: 5.4 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/229804; http://www.kb.cert.org/vuls/id/BLUU-985QS8; https://community.enterasys.com/enterasys/topics/ensrt_product_advisory_vu_229804_ospf_lsa_lookup_identifers-il4n3
CVE: CVE-2013-7313
Published: 2014-01-23
Description: The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
CVSS Score: 5.4 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/229804; http://www.kb.cert.org/vuls/id/BLUU-97KQ26; http://www.kb.cert.org/vuls/id/229804
CVE: CVE-2013-7314
Published: 2014-01-23
Description: The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
CVSS Score: 6.8 (MEDIUM)
References: http://jpn.nec.com/security-info/secinfo/nv13-006.html; http://jpn.nec.com/univerge/ix/Support/CERT/VU229804.html; http://www.kb.cert.org/vuls/id/229804
CVE: CVE-2013-5371
Published: 2014-01-23
Description: The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC92933; http://www.ibm.com/support/docview.wss?uid=swg21662608; https://exchange.xforce.ibmcloud.com/vulnerabilities/86661
CVE: CVE-2014-0494
Published: 2014-01-23
Description: Adobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://helpx.adobe.com/security/products/Digital-Editions/apsb14-03.html; http://osvdb.org/102364; http://secunia.com/advisories/56578
CVE: CVE-2014-1242
Published: 2014-01-23
Description: Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-310
References: http://osvdb.org/102410; http://support.apple.com/kb/HT6001; http://www.securityfocus.com/bid/65088
CVE: CVE-2013-4152
Published: 2014-01-23
Description: The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2014-0212.html; http://rhn.redhat.com/errata/RHSA-2014-0245.html; http://rhn.redhat.com/errata/RHSA-2014-0254.html
CVE: CVE-2013-6933
Published: 2014-01-23
Description: The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) space or (2) tab character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-189
References: http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html; http://www.live555.com/liveMedia/public/changelog.txt; http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html
CVE: CVE-2013-6934
Published: 2014-01-23
Description: The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a space character at the beginning of an RTSP message, which triggers an integer underflow, infinite loop, and buffer overflow.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6933.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://isecpartners.github.io/fuzzing/vulnerabilities/2013/12/30/vlc-vulnerability.html; http://www.live555.com/liveMedia/public/changelog.txt; http://www.securityfocus.com/bid/65139
CVE: CVE-2013-7048
Published: 2014-01-23
Description: OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier uses world-writable and world-readable permissions for the temporary directory used to store live snapshots, which allows local users to read and modify live snapshots.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2014-0231.html; http://www.openwall.com/lists/oss-security/2014/01/13/2; https://bugs.launchpad.net/nova/+bug/1227027
CVE: CVE-2013-7315
Published: 2014-01-23
Description: The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML with JAXB, aka an XML External Entity (XXE) issue, and a different vulnerability than CVE-2013-4152.  NOTE: this issue was SPLIT from CVE-2013-4152 due to different affected versions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://seclists.org/bugtraq/2013/Aug/154; http://seclists.org/fulldisclosure/2013/Nov/14; http://www.debian.org/security/2014/dsa-2842
CVE: CVE-2013-5667
Published: 2014-01-24
Description: The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a get_userid action with shell metacharacters in the username parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://www.7elements.co.uk/news/cve-2013-5667/; http://www.7elements.co.uk/resources/blog/multiple-vulnerabilities-thecus-nas/; http://www.kb.cert.org/vuls/id/105686
CVE: CVE-2013-5668
Published: 2014-01-24
Description: The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentials by reading this page's cleartext content.
CVSS Score: 7.8 (HIGH)
CWE: CWE-255
References: http://www.7elements.co.uk/news/cve-2013-5668/; http://www.7elements.co.uk/resources/blog/multiple-vulnerabilities-thecus-nas/; http://www.kb.cert.org/vuls/id/105686
CVE: CVE-2013-5669
Published: 2014-01-24
Description: The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score: 7.8 (HIGH)
CWE: CWE-255
References: http://www.7elements.co.uk/news/cve-2013-5669/; http://www.7elements.co.uk/resources/blog/multiple-vulnerabilities-thecus-nas/; http://www.kb.cert.org/vuls/id/105686
CVE: CVE-2013-6030
Published: 2014-01-24
Description: Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka MPU2016) KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.kb.cert.org/vuls/id/168751; http://www.securityfocus.com/bid/65105; http://www.kb.cert.org/vuls/id/168751
CVE: CVE-2013-7175
Published: 2014-01-24
Description: Multiple SQL injection vulnerabilities in Avanset Visual CertExam Manager 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) Title, (2) File name, or (3) Candidate Name field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/102414; http://www.kb.cert.org/vuls/id/869702; http://www.securityfocus.com/bid/65104
CVE: CVE-2014-0674
Published: 2014-01-24
Description: Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attackers to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a client system with a crafted host name, aka Bug ID CSCud10992.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://osvdb.org/102409; http://secunia.com/advisories/56619; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0674
CVE: CVE-2013-5350
Published: 2014-01-24
Description: The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly validate login data in HTTP Cookie headers, which allows remote attackers to conduct PHP object injection attacks, and execute arbitrary PHP code, via a crafted serialized object.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN69986880/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2014-000009; http://secunia.com/advisories/54043
CVE: CVE-2013-7184
Published: 2014-01-24
Description: Gretech GOM Media Player 2.2.56.5158 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted AVI file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/30414; https://exchange.xforce.ibmcloud.com/vulnerabilities/89914; http://www.exploit-db.com/exploits/30414
CVE: CVE-2013-7316
Published: 2014-01-24
Description: Cross-site scripting (XSS) vulnerability in GitLab 6.0 and other versions before 6.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML file, as demonstrated by README.html.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/30329; http://www.securityfocus.com/bid/64490; https://exchange.xforce.ibmcloud.com/vulnerabilities/89932
CVE: CVE-2013-7317
Published: 2014-01-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in CS-Cart before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) settings_file or (2) data_file parameter to (a) ampie.swf, (b) amline.swf, or (c) amcolumn.swf.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/405942; http://www.kb.cert.org/vuls/id/405942
CVE: CVE-2014-0809
Published: 2014-01-24
Description: Directory traversal vulnerability in the Gapless Player SimZip (aka Simple Zip Viewer) application before 1.2.1 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://jvn.jp/en/jp/JVN49384502/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2014-000008; https://exchange.xforce.ibmcloud.com/vulnerabilities/90980
CVE: CVE-2014-1252
Published: 2014-01-24
Description: Double free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415
References: http://osvdb.org/102460; http://secunia.com/advisories/56615; http://secunia.com/advisories/56630
CVE: CVE-2013-1885
Published: 2014-01-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) tus/ or (2) tus/tus/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/93626; http://osvdb.org/93627; http://rhn.redhat.com/errata/RHSA-2013-0856.html
CVE: CVE-2013-1886
Published: 2014-01-24
Description: Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to viewing certificates.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://osvdb.org/93613; http://rhn.redhat.com/errata/RHSA-2013-0856.html; http://www.securityfocus.com/bid/60085
CVE: CVE-2013-1853
Published: 2014-01-24
Description: Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database.
CVSS Score: 2.1 (LOW)
CWE: CWE-310
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702905; http://lists.opensuse.org/opensuse-updates/2014-01/msg00080.html; http://www.openwall.com/lists/oss-security/2013/03/13/1
CVE: CVE-2013-2192
Published: 2014-01-24
Description: The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information by forcing a downgrade to simple authentication.
CVSS Score: 3.2 (LOW)
CWE: CWE-287
References: http://rhn.redhat.com/errata/RHSA-2014-0037.html; http://rhn.redhat.com/errata/RHSA-2014-0400.html; http://seclists.org/fulldisclosure/2013/Aug/251
CVE: CVE-2013-6434
Published: 2014-01-24
Description: The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE client invocation method, initially makes insecure connections to the SPICE server, which allows man-in-the-middle attackers to spoof the SPICE server.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2014-0038.html; http://www.securityfocus.com/bid/65077; http://www.securitytracker.com/id/1029653
CVE: CVE-2013-6457
Published: 2014-01-24
Description: The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-264
References: http://libvirt.org/news.html; http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html; http://secunia.com/advisories/60895
CVE: CVE-2013-6458
Published: 2014-01-24
Description: Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: http://libvirt.org/news.html; http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html; http://lists.opensuse.org/opensuse-updates/2014-02/msg00062.html