Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

canonical ubuntu linux 13.04 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2013-5610
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox prior to 26.0 and SeaMonkey prior to 2.23 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla FirefoxMozilla SeamonkeyOracle Solaris 11.3Fedoraproject Fedora 18Fedoraproject Fedora 19Fedoraproject Fedora 20Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 13.10Opensuse Opensuse 12.2Opensuse Opensuse 12.3Opensuse Opensuse 13.1Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 11
5
CVSSv2
CVE-2013-6629
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo up to and including 1.3.0, as used in Google Chrome prior to 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that fol...
Google ChromeOracle Solaris 11.3Artifex Gpl GhostscriptLibjpeg-turbo Libjpeg-turboFedoraproject Fedora 18Fedoraproject Fedora 20Fedoraproject Fedora 19Opensuse Opensuse 12.3Opensuse Opensuse 12.2Opensuse Opensuse 13.1Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 13.10Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 12.04Debian Debian Linux 8.0Debian Debian Linux 7.0Mozilla FirefoxMozilla SeamonkeyMozilla ThunderbirdMozilla Firefox Esr
7.5
CVSSv2
CVE-2013-5615
The JavaScript implementation in Mozilla Firefox prior to 26.0, Firefox ESR 24.x prior to 24.2, Thunderbird prior to 24.2, and SeaMonkey prior to 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified...
Mozilla FirefoxMozilla Firefox EsrMozilla SeamonkeyMozilla ThunderbirdCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 13.10Suse Suse Linux Enterprise Software Development Kit 11.0Opensuse Opensuse 12.2Opensuse Opensuse 12.3Opensuse Opensuse 13.1Suse Suse Linux Enterprise Desktop 11Suse Suse Linux Enterprise Server 11Fedoraproject Fedora 18Fedoraproject Fedora 19Fedoraproject Fedora 20
4.3
CVSSv2
CVE-2013-6673
Mozilla Firefox prior to 26.0, Firefox ESR 24.x prior to 24.2, Thunderbird prior to 24.2, and SeaMonkey prior to 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle malicious users to spoof SSL servers in ...
Fedoraproject Fedora 18Fedoraproject Fedora 19Fedoraproject Fedora 20Mozilla FirefoxMozilla Firefox EsrMozilla SeamonkeyMozilla ThunderbirdSuse Suse Linux Enterprise Software Development Kit 11.0Opensuse Opensuse 12.2Opensuse Opensuse 12.3Opensuse Opensuse 13.1Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 13.10Canonical Ubuntu Linux 12.10
4
CVSSv2
CVE-2013-6422
The GnuTLS backend in libcurl 7.21.4 up to and including 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote malicious users to spoof server...
Debian Debian Linux 7.0Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 13.04Haxx Libcurl 7.30.0Haxx Libcurl 7.28.0Haxx Libcurl 7.23.1Haxx Libcurl 7.21.4Haxx Libcurl 7.27.0Haxx Libcurl 7.26.0Haxx Libcurl 7.25.0Haxx Libcurl 7.24.0Haxx Libcurl 7.33.0Haxx Libcurl 7.32.0Haxx Libcurl 7.21.5Haxx Libcurl 7.21.6Haxx Libcurl 7.21.7Haxx Libcurl 7.31.0Haxx Libcurl 7.29.0Haxx Libcurl 7.28.1Haxx Libcurl 7.23.0
4.3
CVSSv2
CVE-2013-2566
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote malicious users to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.
Oracle Communications Application Session ControllerOracle Http Server 11.1.1.7.0Oracle Http Server 11.1.1.9.0Oracle Http Server 12.1.3.0.0Oracle Http Server 12.2.1.1.0Oracle Http Server 12.2.1.2.0Oracle Integrated Lights Out Manager FirmwareFujitsu Sparc Enterprise M3000 FirmwareFujitsu Sparc Enterprise M4000 FirmwareFujitsu Sparc Enterprise M5000 FirmwareFujitsu Sparc Enterprise M8000 FirmwareFujitsu Sparc Enterprise M9000 FirmwareFujitsu M10-1 FirmwareFujitsu M10-4 FirmwareFujitsu M10-4s FirmwareCanonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 13.10Mozilla FirefoxMozilla Firefox EsrMozilla Seamonkey
4.6
CVSSv2
CVE-2013-1061
dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 prior to 0.92.17.3, 0.92.9 prior to 0.92.9.3, and 0.82.7 prior to 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by lever...
Marc Deslauriers Software-properties 0.92.9Marc Deslauriers Software-properties 0.82.7.4Marc Deslauriers Software-properties 0.92.17.2Marc Deslauriers Software-properties 0.82.7.3Marc Deslauriers Software-properties 0.82.7.2Marc Deslauriers Software-properties 0.92.17.1Marc Deslauriers Software-properties 0.92.17Marc Deslauriers Software-properties 0.82.7.1Marc Deslauriers Software-properties 0.82.7Marc Deslauriers Software-properties 0.92.9.2Marc Deslauriers Software-properties 0.92.9.1Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 12.04
5
CVSSv2
CVE-2013-2175
HAProxy 1.4 prior to 1.4.24 and 1.5 prior to 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote malicious users to cause a denial of service (negative array index usage and crash) via an HTTP header with a...
Debian Debian Linux 6.0Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 13.04Redhat Enterprise Linux Load Balancer 6.4Redhat Enterprise Linux Load Balancer 6.0Haproxy Haproxy 1.4.6Haproxy Haproxy 1.4.8Haproxy Haproxy 1.4.15Haproxy Haproxy 1.4.17Haproxy Haproxy 1.4Haproxy Haproxy 1.4.22Haproxy Haproxy 1.4.9Haproxy Haproxy 1.4.10Haproxy Haproxy 1.4.11Haproxy Haproxy 1.4.12Haproxy Haproxy 1.4.13Haproxy Haproxy 1.4.1Haproxy Haproxy 1.4.2Haproxy Haproxy 1.4.3Haproxy Haproxy 1.4.4Haproxy Haproxy 1.4.18
5
CVSSv2
CVE-2013-2020
Integer underflow in the cli_scanpe function in pe.c in ClamAV prior to 0.97.8 allows remote malicious users to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read.
Canonical Ubuntu Linux 13.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 11.10Suse Linux Enterprise Server 11.0Clamav Clamav 0.96Clamav Clamav 0.95.1Clamav Clamav 0.95Clamav Clamav 0.93.2Clamav Clamav 0.93.3Clamav Clamav 0.90.2Clamav Clamav 0.90.1 P0Clamav Clamav 0.93.1Clamav Clamav 0.94.1Clamav Clamav 0.96.1Clamav Clamav 0.96.2Clamav Clamav 0.97.2Clamav Clamav 0.95.3Clamav Clamav 0.90Clamav Clamav 0.93Clamav Clamav 0.90.1
7.5
CVSSv2
CVE-2013-3567
Puppet 2.7.x prior to 2.7.22 and 3.2.x prior to 3.2.2, and Puppet Enterprise prior to 2.8.2, deserializes untrusted YAML, which allows remote malicious users to instantiate arbitrary Ruby classes and execute arbitrary code via a crafted REST API call.
Puppetlabs Puppet 2.7.1Puppet Puppet 2.7.10Puppet Puppet 2.7.18Puppetlabs Puppet 2.7.19Puppetlabs Puppet 3.2.0Puppet Puppet 2.7.13Puppet Puppet 2.7.14Puppetlabs Puppet 2.7.20Puppet Puppet 2.7.21Puppet Puppet 2.7.11Puppet Puppet 2.7.12Puppet Puppet 2.7.2Puppet Puppet 3.2.1Puppetlabs Puppet 2.7.0Puppet Puppet 2.7.16Puppet Puppet 2.7.17Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 13.04Novell Suse Linux Enterprise Server 11.0Novell Suse Linux Enterprise Desktop 11.0Novell Suse Linux Enterprise Desktop 11
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook