rainbutterfly/cve_corpus huggingface dataset:
CVE-2013-4093 
The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive information via (1) a direct request to dwr/call/plaincall/AsyncOperationsContainer.getOperationState.dwr, which reveals the installation path in the s0.filePath field, or (2) a T/keyManagement request to plain/settings.html, which reveals a temporary path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-28T23:00:00.000Z
CVE-2013-4094 
The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to upload executable files via the (1) private_key or (2) public_key parameter in a T/keyManagement request to plain/settings.html, as demonstrated by uploading a Linux ELF file and a shell script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-28T23:00:00.000Z
CVE-2013-4095 
plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to execute arbitrary commands via a task with a [command].value field in conjunction with an [arguments].value field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-28T23:00:00.000Z
CVE-2013-4096 
ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOST_NAME field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-28T23:00:00.000Z
CVE-2013-4097 
ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in a -REG-E-OPEN error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-28T23:00:00.000Z
CVE-2013-4098 
ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-06-28T23:00:00.000Z
CVE-2013-4099 
Multiple unspecified vulnerabilities in OpenAL32.dll in JOAL 2.0-rc11, as used in JOGAMP, allow context-dependent attackers to execute arbitrary code via a crafted parameter to the (1) alAuxiliaryEffectSlotf1, (2) alBuffer3f1, (3) alBufferfv1, (4) alDeleteEffects1, (5) alEffectf1, (6) alEffectfv1, (7) alEffectiv1, (8) alEnable1, (9) alFilterfv1, (10) alFilteriv1, (11) alGenAuxiliaryEffectSlots1, (12) alGenEffects1, (13) alGenFilters1, (14) alGenSources1, (15) alGetAuxiliaryEffectSlotiv1, (16) alGetBuffer3f1, (17) alGetBuffer3i1, (18) alGetBufferf1, (19) alGetBufferiv1, (20) alGetDoublev1, (21) alGetEffectf1, (22) alGetEffectfv1, (23) alGetEffectiv1, (24) alGetEnumValue1, (25) alGetFilteri1, (26) alGetFilteriv1, (27) alGetFloat1, (28) alGetFloatv1, (29) alGetListener3f1, (30) alGetListener3i1, (31) alGetListenerf1, (32) alGetListeneri1, (33) alGetListeneriv1, (34) alGetProcAddress1, (35) alGetProcAddressStatic, (36) alGetSource3f1, (37) alGetSource3i1, (38) alGetSourcef1, (39) alGetSourcefv1, (40) alGetSourcei1, (41) alGetSourceiv1, (42) alGetString1java/lang/String;, (43) alIsAuxiliaryEffectSlot1, (44) alIsBuffer1, (45) alIsEffect1, (46) alIsExtensionPresent1, (47) alIsFilter1, (48) alListener3f1, (49) alListener3i1, (50) alListenerf1, (51) alListenerfv1, (52) alListeneri1, (53) alListeneriv1, (54) alSource3f1, (55) alSource3i1, (56) alSourcef1, (57) alSourcefv1, (58) alSourcei1, (59) alSourceiv1, (60) alSourcePause1, (61) alSourcePausev1, (62) alSourcePlay1, (63) alSourcePlayv1, (64) alSourceQueueBuffers1, (65) alSourceRewindv1, (66) alSourceStop1, (67) alSourceStopv1, (68) alSourceUnqueueBuffers1, or (69) alSpeedOfSound1 method in jogamp.openal.ALImpl.dispatch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-13T14:00:00.000Z
CVE-2013-4100 
Cryptocat before 2.0.22 has Remote Denial of Service via username
Problem types: description: Chat Remote DoS
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T14:55:58.000Z
CVE-2013-4101 
Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness
Problem types: description: HTML Handling Weakness
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T14:52:09.000Z
CVE-2013-4102 
Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness
Problem types: description: Generator (RNG) Weakness
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T14:45:30.000Z
CVE-2013-4103 
Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input
Problem types: description: Remote Script Injection
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T14:41:50.000Z
CVE-2013-4104 
Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol
Problem types: description: Exchange Poisoning Weakness
Affected products: vendor: n/a
product: n/a
Published: 2019-11-04T15:40:00.000Z
CVE-2013-4105 
Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure
Problem types: description: Plaintext Traffic Disclosure
Affected products: vendor: Cryptocat
product: Cryptocat
Published: 2019-11-04T16:27:30.000Z
CVE-2013-4106 
A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.
Problem types: description: Overview Nickname XSS
Affected products: vendor: Cryptocat
product: Cryptocat
Published: 2019-11-14T19:56:24.000Z
CVE-2013-4107 
Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting
Problem types: description: Nickname Change XSS
Affected products: vendor: Cryptocat
product: Cryptocat
Published: 2019-11-05T12:47:12.000Z
CVE-2013-4108 
Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.
Problem types: description: Unspecified Minor Issues
Affected products: vendor: Cryptocat
product: Cryptocat
Published: 2019-11-14T19:14:44.000Z
CVE-2013-4109 
An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.
Problem types: description: Handling Unspecified XSS
Affected products: vendor: Cryptocat
product: Message Handling
Published: 2019-11-14T19:00:37.000Z
CVE-2013-4110 
Cryptocat has an Unspecified Chat Participant User List Disclosure
Problem types: description: User List Disclosure
Affected products: vendor: Cryptocat
product: Cryptocat
Published: 2019-11-05T12:51:50.000Z
CVE-2013-4111 
The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate and allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-28T17:00:00.000Z
CVE-2013-4112 
The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-28T19:00:00.000Z
CVE-2013-4113 
ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted document that is processed by the xml_parse_into_struct function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-13T10:00:00.000Z
CVE-2013-4114 
The automatic update request in Nagstamont before 0.9.10 uses a cleartext base64 format for transmission of a username and password, which allows remote attackers to obtain sensitive information by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-16T17:00:00.000Z
CVE-2013-4115 
Buffer overflow in the idnsALookup function in dns_internal.cc in Squid 3.2 through 3.2.11 and 3.3 through 3.3.6 allows remote attackers to cause a denial of service (memory corruption and server termination) via a long name in a DNS lookup request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-09T22:00:00.000Z
CVE-2013-4116 
lib/npm.js in Node Packaged Modules (npm) before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-22T14:00:00.000Z
CVE-2013-4117 
Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-16T10:00:00.000Z
CVE-2013-4118 
FreeRDP before 1.1.0-beta1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-03T21:00:00.000Z
CVE-2013-4119 
FreeRDP before 1.1.0-beta+2013071101 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by disconnecting before authentication has finished.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-10-03T21:00:00.000Z
CVE-2013-4120 
Katello has a Denial of Service vulnerability in API OAuth authentication
Problem types: description: DoS in API OAuth authentication
Affected products: vendor: Katello
product: Katello
Published: 2019-12-10T14:32:37.000Z
CVE-2013-4122 
Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service (thread crash and consumption) via (1) an invalid salt or, when FIPS-140 is enabled, a (2) DES or (3) MD5 encrypted password, which triggers a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-27T00:00:00.000Z
CVE-2013-4123 
client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafted port number in a HTTP Host header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T19:00:00.000Z
CVE-2013-4124 
Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-05T15:00:00.000Z
CVE-2013-4125 
The fib6_add_rt2node function in net/ipv6/ip6_fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement (RA) messages in certain circumstances involving three routes that initially qualified for membership in an ECMP route set until a change occurred for one of the first two routes, which allows remote attackers to cause a denial of service (system crash) via a crafted sequence of messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-15T20:00:00.000Z
CVE-2013-4127 
Use-after-free vulnerability in the vhost_net_set_backend function in drivers/vhost/net.c in the Linux kernel through 3.10.3 allows local users to cause a denial of service (OOPS and system crash) via vectors involving powering on a virtual machine.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-28T18:00:00.000Z
CVE-2013-4128 
Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-16T16:00:00.000Z
CVE-2013-4129 
The bridge multicast implementation in the Linux kernel through 3.10.3 does not check whether a certain timer is armed before modifying the timeout value of that timer, which allows local users to cause a denial of service (BUG and system crash) via vectors involving the shutdown of a KVM virtual machine, related to net/bridge/br_mdb.c and net/bridge/br_multicast.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-28T18:00:00.000Z
CVE-2013-4130 
The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform ring loops, which might allow remote attackers to cause a denial of service (reachable assertion and server exit) by triggering a network error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-20T22:00:00.000Z
CVE-2013-4131 
The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds read) via a certain (1) COPY, (2) DELETE, or (3) MOVE request against a revision root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-31T10:00:00.000Z
CVE-2013-4132 
KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pw_encrypt functions, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via (1) an invalid salt or a (2) DES or (3) MD5 encrypted password, when FIPS-140 is enable, to KDM or an (4) invalid password to KCheckPass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-16T19:00:00.000Z
CVE-2013-4133 
kde-workspace before 4.10.5 has a memory leak in plasma desktop
Problem types: description: leak
Affected products: vendor: kde-workspace
product: kde-workspace
Published: 2019-12-10T14:36:12.000Z
CVE-2013-4134 
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-05T21:00:00.000Z
CVE-2013-4135 
The vos command in OpenAFS 1.6.x before 1.6.5, when using the -encrypt option, only enables integrity protection and sends data in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-11-05T21:00:00.000Z
CVE-2013-4136 
ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T19:00:00.000Z
CVE-2013-4137 
Multiple SQL injection vulnerabilities in StatusNet 1.0 before 1.0.2 and 1.1.0 allow remote attackers to execute arbitrary SQL commands via vectors related to user lists and "a particular tag format."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-11T22:00:00.000Z
CVE-2013-4138 
Cross-site scripting (XSS) vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any article type content" permission to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-28T15:00:00.000Z
CVE-2013-4139 
The Stage File Proxy module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to cause a denial of service (file operations performance degradation and failure) via a large number of requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-28T15:00:00.000Z
CVE-2013-4140 
Cross-site scripting (XSS) vulnerability in the TinyBox (Simple Splash) module before 7.x-2.2 for Drupal allows remote authenticated users with the "administer tinybox" permission to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-29T22:00:00.000Z
CVE-2013-4143 
The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers to bypass the screen lock via vectors related to invalid salts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-30T14:00:00.000Z
CVE-2013-4144 
There is an object injection vulnerability in swfupload plugin for wordpress.
Problem types: cwe_id: CWE-20
description: CWE-20
Affected products: vendor: n/a
product: swfupload wordpress plugin
Published: 2022-06-30T17:21:21.000Z
CVE-2013-4147 
Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in a request in the (1) log_msg function in log.c or (2) version or (3) build_version function in version.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-09T21:00:00.000Z
CVE-2013-4148 
Integer signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-04T21:00:00.000Z
CVE-2013-4149 
Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large MAC table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-04T21:00:00.000Z
CVE-2013-4150 
The virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors in which the value of curr_queues is greater than max_queues, which triggers an out-of-bounds write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-04T21:00:00.000Z
CVE-2013-4151 
The virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-11-04T21:00:00.000Z
CVE-2013-4152 
The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external entity declaration in conjunction with an entity reference in a (1) DOMSource, (2) StAXSource, (3) SAXSource, or (4) StreamSource, aka an XML External Entity (XXE) issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-23T21:00:00.000Z
CVE-2013-4153 
Double free vulnerability in the qemuAgentGetVCPUs function in qemu/qemu_agent.c in libvirt 1.0.6 through 1.1.0 allows remote attackers to cause a denial of service (daemon crash) via a cpu count request, as demonstrated by the "virsh vcpucount dom --guest" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T21:00:00.000Z
CVE-2013-4154 
The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to "agent based cpu (un)plug," as demonstrated by the "virsh vcpucount foobar --guest" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-09-30T21:00:00.000Z
CVE-2013-4155 
OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-08-20T22:00:00.000Z
CVE-2013-4156 
Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted element in an OOXML document file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-31T10:00:00.000Z
CVE-2013-4157 
Red Hat Storage 2.0 allows local users to overwrite arbitrary files via a symlink attack on the (1) e, (2) local-bricks.list, (3) bricks.err, or (4) limits.conf files in /tmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-10-04T17:00:00.000Z
CVE-2013-4158 
smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790)
Problem types: description: XSS flaw (incomplete fix for CVE-2012-0790)
Affected products: vendor: smokeping
product: smokeping
Published: 2019-12-11T12:45:34.000Z
CVE-2013-4159 
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-06T18:00:00.000Z
CVE-2013-4160 
Little CMS (lcms2) before 2.5, as used in OpenJDK 7 and possibly other products, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to (1) cmsStageAllocLabV2ToV4curves, (2) cmsPipelineDup, (3) cmsAllocProfileSequenceDescription, (4) CurvesAlloc, and (5) cmsnamed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-01-21T18:00:00.000Z
CVE-2013-4161 
gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue.
Problem types: description: Other
Affected products: vendor: gksu-polkit-0.0.3-6.fc18
product: gksu-polkit-0.0.3-6.fc18
Published: 2019-12-31T18:13:46.000Z
CVE-2013-4162 
The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect function call for pending data, which allows local users to cause a denial of service (BUG and system crash) via a crafted application that uses the UDP_CORK option in a setsockopt system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-07-28T18:00:00.000Z