deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-7222
Published: 2014-01-02
Description: config/initializers/secret_token.rb in Fat Free CRM before 0.12.1 has a fixed FatFreeCRM::Application.config.secret_token value, which makes it easier for remote attackers to spoof signed cookies by referring to the key in the source code.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://openwall.com/lists/oss-security/2013/12/28/2; http://seclists.org/fulldisclosure/2013/Dec/199; http://www.phenoelit.org/stuff/ffcrm.txt
CVE: CVE-2013-7223
Published: 2014-01-02
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Fat Free CRM before 0.12.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to the lack of a protect_from_forgery line in app/controllers/application_controller.rb.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://openwall.com/lists/oss-security/2013/12/28/2; http://seclists.org/fulldisclosure/2013/Dec/199; http://www.phenoelit.org/stuff/ffcrm.txt
CVE: CVE-2013-7224
Published: 2014-01-02
Description: Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2013/12/28/2; http://seclists.org/fulldisclosure/2013/Dec/199; http://www.phenoelit.org/stuff/ffcrm.txt
CVE: CVE-2013-7225
Published: 2014-01-02
Description: Multiple SQL injection vulnerabilities in app/controllers/home_controller.rb in Fat Free CRM before 0.12.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the homepage timeline feature or (2) the activity feature.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://openwall.com/lists/oss-security/2013/12/28/2; http://seclists.org/fulldisclosure/2013/Dec/199; http://www.phenoelit.org/stuff/ffcrm.txt
CVE: CVE-2013-7249
Published: 2014-01-02
Description: Fat Free CRM before 0.12.1 does not restrict XML serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.xml, a different vulnerability than CVE-2013-7224.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://openwall.com/lists/oss-security/2013/12/28/2; http://seclists.org/fulldisclosure/2013/Dec/199; http://www.phenoelit.org/stuff/ffcrm.txt
CVE: CVE-2013-7250
Published: 2014-01-02
Description: Cross-site scripting (XSS) vulnerability in the JsonBuilder implementation in ProjectForge before 5.3 allows remote authenticated users to inject arbitrary web script or HTML via an autocompletion string, related to web/core/JsonBuilder.java and web/wicket/autocompletion/PFAutoCompleteBehavior.java.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www.projectforge.org/pf-en/News; http://www.securityfocus.com/bid/64632; https://github.com/micromata/projectforge-webapp/commit/5a6a[PII_REDACTED]3b76e528a04a9e4ba26f08a83c
CVE: CVE-2013-7251
Published: 2014-01-02
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in ProjectForge before 5.3 allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) web/admin/, (2) web/core/, (3) web/dialog/, (4) web/fibu/, (5) web/mobile/, (6) web/task/, or (7) web/wicket/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.projectforge.org/pf-en/News; http://www.securityfocus.com/bid/64632; https://github.com/micromata/projectforge-webapp/commit/422de35e3c3141e418a73bfb39b430d5fd74077e
CVE: CVE-2013-6991
Published: 2014-01-03
Description: Cross-site scripting (XSS) vulnerability in the WP-Cron Dashboard plugin 1.1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the procname parameter to wp-admin/tools.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://wordpress.org/support/topic/wp-cron-dashboard-115-security-vulnerability-notification-xss; http://www.securityfocus.com/archive/1/530536/100/0/threaded; https://www.htbridge.com/advisory/HTB23189
CVE: CVE-2013-6992
Published: 2014-01-03
Description: Cross-site request forgery (CSRF) vulnerability in askapache-firefox-adsense.php in the AskApache Firefox Adsense plugin 3.0 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the aafireadcode parameter to wp-admin/options-general.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/101435; http://www.securityfocus.com/archive/1/530539/100/0/threaded; http://www.securityfocus.com/bid/64534
CVE: CVE-2013-6993
Published: 2014-01-03
Description: Cross-site scripting (XSS) vulnerability in the Ad-minister plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the key parameter in a delete action to wp-admin/tools.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://wordpress.org/support/topic/ad-minister-06-security-vulnerability-notification-xss; http://www.securityfocus.com/archive/1/530540/100/0/threaded; https://www.htbridge.com/advisory/HTB23187
CVE: CVE-2013-7240
Published: 2014-01-03
Description: Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dew_file parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://seclists.org/oss-sec/2013/q4/566; http://seclists.org/oss-sec/2013/q4/570; http://wordpress.org/support/topic/security-vulnerability-cve-2013-7240-directory-traversal
CVE: CVE-2013-7254
Published: 2014-01-03
Description: Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://docs.opsview.com/doku.php?id=opsview4.4:changes; http://secunia.com/advisories/56096; https://exchange.xforce.ibmcloud.com/vulnerabilities/89934
CVE: CVE-2013-7255
Published: 2014-01-03
Description: Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://docs.opsview.com/doku.php?id=opsview4.4:changes; http://secunia.com/advisories/56096; https://exchange.xforce.ibmcloud.com/vulnerabilities/89935
CVE: CVE-2013-7256
Published: 2014-01-03
Description: Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes; http://secunia.com/advisories/56096; http://docs.opsview.com/doku.php?id=opsview4.4:changes#fixes
CVE: CVE-2013-7257
Published: 2014-01-03
Description: Cross-site scripting (XSS) vulnerability in Codiad 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the Project Name field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/101484; http://packetstormsecurity.com/files/124537; http://www.securityfocus.com/bid/64476
CVE: CVE-2013-7258
Published: 2014-01-03
Description: Cross-site scripting (XSS) vulnerability in web2ldap 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "displaying group DN and entry data in group administration UI."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/56160; http://www.securityfocus.com/bid/64512; http://www.web2ldap.de/changes-1.1.html
CVE: CVE-2013-2119
Published: 2014-01-03
Description: Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service (prevent application start) or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://blog.phusion.nl/2013/05/29/phusion-passenger-3-0-21-released/; http://blog.phusion.nl/2013/05/29/phusion-passenger-4-0-5-released/; http://rhn.redhat.com/errata/RHSA-2013-1136.html
CVE: CVE-2014-0791
Published: 2014-01-03
Description: Integer overflow in the license_read_scope_list function in libfreerdp/core/license.c in FreeRDP through 1.0.2 allows remote RDP servers to cause a denial of service (application crash) or possibly have unspecified other impact via a large ScopeCount value in a Scope List in a Server License Request packet.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://advisories.mageia.org/MGASA-2014-0287.html; http://lists.opensuse.org/opensuse-updates/2014-07/msg00008.html; http://lists.opensuse.org/opensuse-updates/2016-09/msg00101.html
CVE: CVE-2013-6953
Published: 2014-01-03
Description: BlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes via a request for the sioc.axd file.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.kb.cert.org/vuls/id/553166; http://www.kb.cert.org/vuls/id/553166
CVE: CVE-2009-5137
Published: 2014-01-03
Description: Stack-based buffer overflow in Mini-stream CastRipper 2.50.70 allows remote attackers to execute arbitrary code via a long URL in the [playlist] section in a .pls file, a different vector than CVE-2009-1667.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/8663/; http://www.exploit-db.com/exploits/8663/
CVE: CVE-2013-7260
Published: 2014-01-03
Description: Multiple stack-based buffer overflows in RealNetworks RealPlayer before 17.0.4.61 on Windows, and Mac RealPlayer before 12.0.1.1738, allow remote attackers to execute arbitrary code via a long (1) version number or (2) encoding declaration in the XML declaration of an RMP file, a different issue than CVE-2013-6877.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://service.real.com/realplayer/security/12202013_player/en/; http://www.exploit-db.com/exploits/30468/; http://www.kb.cert.org/vuls/id/698278
CVE: CVE-2013-2344
Published: 2014-01-04
Description: Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1866.
CVSS Score: 10.0 (HIGH)
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422; http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422
CVE: CVE-2013-2345
Published: 2014-01-04
Description: Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1869.
CVSS Score: 10.0 (HIGH)
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422; http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422
CVE: CVE-2013-2346
Published: 2014-01-04
Description: Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1870.
CVSS Score: 10.0 (HIGH)
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422; http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422
CVE: CVE-2013-2347
Published: 2014-01-04
Description: The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.
CVSS Score: 10.0 (HIGH)
References: http://ddilabs.blogspot.com/2014/02/fun-with-hp-data-protector-execbar.html; http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422; http://www.exploit-db.com/exploits/32164
CVE: CVE-2013-2348
Published: 2014-01-04
Description: Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1892.
CVSS Score: 10.0 (HIGH)
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422; http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422
CVE: CVE-2013-2349
Published: 2014-01-04
Description: Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1896.
CVSS Score: 10.0 (HIGH)
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422; http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422
CVE: CVE-2013-2350
Published: 2014-01-04
Description: Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1897.
CVSS Score: 10.0 (HIGH)
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422; http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422
CVE: CVE-2013-6194
Published: 2014-01-04
Description: Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905.
CVSS Score: 10.0 (HIGH)
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422; http://osvdb.org/show/osvdb/101630; http://www.exploit-db.com/exploits/31181
CVE: CVE-2013-6195
Published: 2014-01-04
Description: Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-2008.
CVSS Score: 10.0 (HIGH)
References: http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422; http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03822422
CVE: CVE-2012-2898
Published: 2014-01-05
Description: Google Chrome before 21.0.1180.82 on iOS on iPad devices allows remote attackers to spoof the Omnibox URL via vectors involving SSL error messages, a related issue to CVE-2012-0674.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://googlechromereleases.blogspot.com/2012/09/chrome-for-ios-update_24.html; https://code.google.com/p/chromium/issues/detail?id=146760; http://googlechromereleases.blogspot.com/2012/09/chrome-for-ios-update_24.html
CVE: CVE-2012-2899
Published: 2014-01-05
Description: Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors involving the document.write method.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://googlechromereleases.blogspot.com/2012/09/chrome-for-ios-update_24.html; https://code.google.com/p/chromium/issues/detail?id=147625; http://googlechromereleases.blogspot.com/2012/09/chrome-for-ios-update_24.html
CVE: CVE-2013-6402
Published: 2014-01-05
Description: base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.11 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hp-pkservice.log temporary file.
CVSS Score: 2.1 (LOW)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=725876; http://lists.opensuse.org/opensuse-updates/2014-01/msg00087.html; http://lists.opensuse.org/opensuse-updates/2014-01/msg00098.html
CVE: CVE-2013-7262
Published: 2014-01-05
Description: SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://www.mapserver.org/development/changelog/changelog-6-4.html#changelog-6-4-1; http://www.securityfocus.com/bid/64671; https://github.com/mapserver/mapserver/commit/3a10f6b829297dae63492a8c63385044bc6953ed
CVE: CVE-2013-6405
Published: 2014-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, CVE-2013-7281.  Reason: This candidate is a duplicate of CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, and CVE-2013-7281.  Notes: All CVE users should reference CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, and/or CVE-2013-7281 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-6463
Published: 2014-01-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2013-7266, CVE-2013-7267, CVE-2013-7268, CVE-2013-7269, CVE-2013-7270, CVE-2013-7271.  Reason: This candidate is a duplicate of CVE-2013-7266, CVE-2013-7267, CVE-2013-7268, CVE-2013-7269, CVE-2013-7270, and CVE-2013-7271.  Notes: All CVE users should reference CVE-2013-7266, CVE-2013-7267, CVE-2013-7268, CVE-2013-7269, CVE-2013-7270, and/or CVE-2013-7271 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2013-7263
Published: 2014-01-06
Description: The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call, related to net/ipv4/ping.c, net/ipv4/raw.c, net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bceaa90240b6019ed73b49965eac7d167610be69; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html
CVE: CVE-2013-7264
Published: 2014-01-06
Description: The l2tp_ip_recvmsg function in net/l2tp/l2tp_ip.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bceaa90240b6019ed73b49965eac7d167610be69; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html; http://seclists.org/oss-sec/2014/q1/29
CVE: CVE-2013-7265
Published: 2014-01-06
Description: The pn_recvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bceaa90240b6019ed73b49965eac7d167610be69; http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00026.html; http://rhn.redhat.com/errata/RHSA-2014-0159.html
CVE: CVE-2013-7266
Published: 2014-01-06
Description: The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c; http://secunia.com/advisories/55882; http://secunia.com/advisories/56036
CVE: CVE-2013-7267
Published: 2014-01-06
Description: The atalk_recvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c; http://secunia.com/advisories/55882; http://secunia.com/advisories/56036
CVE: CVE-2013-7268
Published: 2014-01-06
Description: The ipx_recvmsg function in net/ipx/af_ipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c; http://secunia.com/advisories/55882; http://secunia.com/advisories/56036
CVE: CVE-2013-7269
Published: 2014-01-06
Description: The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c; http://secunia.com/advisories/55882; http://secunia.com/advisories/56036
CVE: CVE-2013-7270
Published: 2014-01-06
Description: The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c; http://secunia.com/advisories/55882; http://secunia.com/advisories/56036
CVE: CVE-2013-7271
Published: 2014-01-06
Description: The x25_recvmsg function in net/x25/af_x25.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f3d3342602f8bcbf37d7c46641cb9bca7618eb1c; http://secunia.com/advisories/55882; http://secunia.com/advisories/56036
CVE: CVE-2013-4564
Published: 2014-01-07
Description: Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124911.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124928.html; http://lists.fedoraproject.org/pipermail/package-announce/2013-December/124943.html