14 March 2013

19 results · Feed

• Medium 5.9
  CVE-2013-2566 Public exploit EPSS 84%

  The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for…

  Mar 14, 2013
• Unscored —
  CVE-2013-2546

  The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library funct…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2013-2548

  The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Li…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2013-2547

  The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Li…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6541

  The ccid3_hc_tx_getsockopt function in net/dccp/ccids/ccid3.c in the Linux kernel before 3.6 does not initialize a cert…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6546

  The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users …

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6536

  net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not verify that the actual Netlink message length is consisten…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6544

  The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allo…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6543

  The l2tp_ip6_getname function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.6 does not initialize a certain struc…

  Mar 14, 2013
• Unscored —
  CVE-2012-6540

  The do_ip_vs_get_ctl function in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 3.6 does not initialize a ce…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6547

  The __tun_chr_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structur…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6537

  net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6545

  The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, whi…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6548

  The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure mem…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6549

  The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain s…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6538

  The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C library funct…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6542

  The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6539

  The dev_ifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which a…

  linux Debian
  Mar 14, 2013
• Medium —
  CVE-2013-1814 Public exploit EPSS 74%

  Apache Rave information disclosure vulnerability

  The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field…

  org.apache.rave:rave-web org.apache.rave:rave-core org.apache.rave:rave-portal-resources Maven
  Mar 14, 2013