# CVEs published 2013-03-14 19 CVEs were published on March 14, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-2566](https://cve.now/CVE-2013-2566.md): The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to (CVSS 5.9) - [CVE-2012-6536](https://cve.now/CVE-2012-6536.md): net/xfrm/xfrm\_user.c in the Linux kernel before 3.6 does not verify that the actual Netlink message length is consistent with a certain head (no CVSS) - [CVE-2012-6537](https://cve.now/CVE-2012-6537.md): net/xfrm/xfrm\_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive inf (no CVSS) - [CVE-2012-6538](https://cve.now/CVE-2012-6538.md): The copy\_to\_user\_auth function in net/xfrm/xfrm\_user.c in the Linux kernel before 3.6 uses an incorrect C library function for copying a str (no CVSS) - [CVE-2012-6539](https://cve.now/CVE-2012-6539.md): The dev\_ifconf function in net/socket.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local users to (no CVSS) - [CVE-2012-6540](https://cve.now/CVE-2012-6540.md): The do\_ip\_vs\_get\_ctl function in net/netfilter/ipvs/ip\_vs\_ctl.c in the Linux kernel before 3.6 does not initialize a certain structure for I (no CVSS) - [CVE-2012-6541](https://cve.now/CVE-2012-6541.md): The ccid3\_hc\_tx\_getsockopt function in net/dccp/ccids/ccid3.c in the Linux kernel before 3.6 does not initialize a certain structure, which (no CVSS) - [CVE-2012-6542](https://cve.now/CVE-2012-6542.md): The llc\_ui\_getname function in net/llc/af\_llc.c in the Linux kernel before 3.6 has an incorrect return value in certain circumstances, which (no CVSS) - [CVE-2012-6543](https://cve.now/CVE-2012-6543.md): The l2tp\_ip6\_getname function in net/l2tp/l2tp\_ip6.c in the Linux kernel before 3.6 does not initialize a certain structure member, which al (no CVSS) - [CVE-2012-6544](https://cve.now/CVE-2012-6544.md): The Bluetooth protocol stack in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users to obt (no CVSS) - [CVE-2012-6545](https://cve.now/CVE-2012-6545.md): The Bluetooth RFCOMM implementation in the Linux kernel before 3.6 does not properly initialize certain structures, which allows local users (no CVSS) - [CVE-2012-6546](https://cve.now/CVE-2012-6546.md): The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to obtain sensitive i (no CVSS) - [CVE-2012-6547](https://cve.now/CVE-2012-6547.md): The \_\_tun\_chr\_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structure, which allows local (no CVSS) - [CVE-2012-6548](https://cve.now/CVE-2012-6548.md): The udf\_encode\_fh function in fs/udf/namei.c in the Linux kernel before 3.6 does not initialize a certain structure member, which allows loc (no CVSS) - [CVE-2012-6549](https://cve.now/CVE-2012-6549.md): The isofs\_export\_encode\_fh function in fs/isofs/export.c in the Linux kernel before 3.6 does not initialize a certain structure member, whic (no CVSS) - [CVE-2013-2546](https://cve.now/CVE-2013-2546.md): The report API in the crypto user configuration API in the Linux kernel through 3.8.2 uses an incorrect C library function for copying strin (no CVSS) - [CVE-2013-2547](https://cve.now/CVE-2013-2547.md): The crypto\_report\_one function in crypto/crypto\_user.c in the report API in the crypto user configuration API in the Linux kernel through 3. (no CVSS) - [CVE-2013-2548](https://cve.now/CVE-2013-2548.md): The crypto\_report\_one function in crypto/crypto\_user.c in the report API in the crypto user configuration API in the Linux kernel through 3. (no CVSS) - [CVE-2013-1814](https://cve.now/CVE-2013-1814.md): The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information (no CVSS, org.apache.rave:rave-core ยท org.apache.rave:rave-web +1) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-03-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.