# CVEs published 2014-01-18

8 CVEs were published on January 18, 2014: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1740](https://cve.now/CVE-2013-1740.md): The ssl\_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start f (no CVSS)
- [CVE-2014-1438](https://cve.now/CVE-2014-1438.md): The restore\_fpu\_checking function in arch/x86/include/asm/fpu-internal.h in the Linux kernel before 3.12.8 on the AMD K7 and K8 platforms do (no CVSS)
- [CVE-2014-1444](https://cve.now/CVE-2014-1444.md): The fst\_get\_iface function in drivers/net/wan/farsync.c in the Linux kernel before 3.11.7 does not properly initialize a certain data struct (no CVSS)
- [CVE-2014-1445](https://cve.now/CVE-2014-1445.md): The wanxl\_ioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly initialize a certain data structure, (no CVSS)
- [CVE-2014-1446](https://cve.now/CVE-2014-1446.md): The yam\_ioctl function in drivers/net/hamradio/yam.c in the Linux kernel before 3.12.8 does not initialize a certain structure member, which (no CVSS)
- [CVE-2013-2037](https://cve.now/CVE-2013-2037.md): httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the (no CVSS, httplib2)
- [CVE-2013-6424](https://cve.now/CVE-2013-6424.md): Integer underflow in the xTrapezoidValid macro in render/picture.h in X.Org allows context-dependent attackers to cause a denial of service (no CVSS)
- [CVE-2013-6425](https://cve.now/CVE-2013-6425.md): Integer underflow in the pixman\_trapezoid\_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2014-01-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.