CVEs published March 14, 2013
19 CVEs were published on March 14, 2013: 0 critical, 0 high.
- Published
- 19
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 18
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- org.apache.rave:rave-core · org.apache.rave:rave-web +1
- 1
Medium, low and unrated 19
- CVE-2013-2566The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to
- CVE-2012-6536net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not verify that the actual Netlink message length is consistent with a certain head
- CVE-2012-6537net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive inf
- CVE-2012-6538The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a str
- CVE-2012-6539The dev_ifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to
- CVE-2012-6540The do_ip_vs_get_ctl function in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 3.6 does not initialize a certain structure for I
- CVE-2012-6541The ccid3_hc_tx_getsockopt function in net/dccp/ccids/ccid3.c in the Linux kernel before 3.6 does not initialize a certain structure, which
- CVE-2012-6542The llc_ui_getname function in net/llc/af_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which
- CVE-2012-6543The l2tp_ip6_getname function in net/l2tp/l2tp_ip6.c in the Linux kernel before 3.6 does not initialize a certain structure member, which al
- CVE-2012-6544The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obt
- CVE-2012-6545The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users
- CVE-2012-6546The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive i
- CVE-2012-6547The __tun_chr_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local
- CVE-2012-6548The udf_encode_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows loc
- CVE-2012-6549The isofs_export_encode_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, whic
- CVE-2013-2546The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strin
- CVE-2013-2547The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.
- CVE-2013-2548The crypto_report_one function in crypto/crypto_user.c in the report API in the crypto user configuration API in the Linux kernel through 3.
- CVE-2013-1814The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive informationorg.apache.rave:rave-core · org.apache.rave:rave-web +1