# CVEs published 2013-03-14

19 CVEs were published on March 14, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2566](https://cve.now/CVE-2013-2566.md): The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers… (CVSS 5.9)
- [CVE-2012-6536](https://cve.now/CVE-2012-6536.md): net/xfrm/xfrm\_user.c in the Linux kernel before 3.6 does not verify that the actual Netlink message length is consistent with a certain… (no CVSS)
- [CVE-2012-6537](https://cve.now/CVE-2012-6537.md): net/xfrm/xfrm\_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive… (no CVSS)
- [CVE-2012-6538](https://cve.now/CVE-2012-6538.md): The copy\_to\_user\_auth function in net/xfrm/xfrm\_user.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a… (no CVSS)
- [CVE-2012-6539](https://cve.now/CVE-2012-6539.md): The dev\_ifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users… (no CVSS)
- [CVE-2012-6540](https://cve.now/CVE-2012-6540.md): The do\_ip\_vs\_get\_ctl function in net/netfilter/ipvs/ip\_vs\_ctl.c in the Linux kernel before 3.6 does not initialize a certain structure for… (no CVSS)
- [CVE-2012-6541](https://cve.now/CVE-2012-6541.md): The ccid3\_hc\_tx\_getsockopt function in net/dccp/ccids/ccid3.c in the Linux kernel before 3.6 does not initialize a certain structure… (no CVSS)
- [CVE-2012-6542](https://cve.now/CVE-2012-6542.md): The llc\_ui\_getname function in net/llc/af\_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances… (no CVSS)
- [CVE-2012-6543](https://cve.now/CVE-2012-6543.md): The l2tp\_ip6\_getname function in net/l2tp/l2tp\_ip6.c in the Linux kernel before 3.6 does not initialize a certain structure member, which… (no CVSS)
- [CVE-2012-6544](https://cve.now/CVE-2012-6544.md): The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to… (no CVSS)
- [CVE-2012-6545](https://cve.now/CVE-2012-6545.md): The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local… (no CVSS)
- [CVE-2012-6546](https://cve.now/CVE-2012-6546.md): The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive… (no CVSS)
- [CVE-2012-6547](https://cve.now/CVE-2012-6547.md): The \_\_tun\_chr\_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows… (no CVSS)
- [CVE-2012-6548](https://cve.now/CVE-2012-6548.md): The udf\_encode\_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows… (no CVSS)
- [CVE-2012-6549](https://cve.now/CVE-2012-6549.md): The isofs\_export\_encode\_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member… (no CVSS)
- [CVE-2013-2546](https://cve.now/CVE-2013-2546.md): The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying… (no CVSS)
- [CVE-2013-2547](https://cve.now/CVE-2013-2547.md): The crypto\_report\_one function in crypto/crypto\_user.c in the report API in the crypto user configuration API in the Linux kernel through… (no CVSS)
- [CVE-2013-2548](https://cve.now/CVE-2013-2548.md): The crypto\_report\_one function in crypto/crypto\_user.c in the report API in the crypto user configuration API in the Linux kernel through… (no CVSS)
- [CVE-2013-1814](https://cve.now/CVE-2013-1814.md): The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive… (no CVSS, org.apache.rave:rave-core · org.apache.rave:rave-web +1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-03-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.