Provide references for further information: Can you share references or external links related to CVE-2013-1962?

{'name': 'FEDORA-2013-8635', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106906.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=ca697e90d5bd6a6dfb94bfb6d4438bdf9a44b739'}, {'name': '[oss-security] 20130516 CVE-2013-1962 libvirt: DoS (max count of open files exhaustion) due sockets leak in the storage pool', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/16/9'}, {'name': 'FEDORA-2013-8681', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106921.html'}, {'name': '93451', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/93451'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=953107'}, {'name': 'USN-1895-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1895-1'}, {'name': '59937', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59937'}, {'name': '53475', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53475'}, {'name': '53440', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53440'}, {'name': 'RHSA-2013:0831', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0831.html'}, {'name': '1028577', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1028577'}, {'name': 'openSUSE-SU-2013:0885', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00022.html'}, {'name': 'libvirt-cve20131962-dos(84341)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/84341'}, {'name': '[libvir-list] 20130516 [libvirt] [PATCH] daemon: fix leak after listing all volumes', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://www.redhat.com/archives/libvir-list/2013-May/msg01222.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1962?


Explain the CVE ID: What does the identifier CVE-2013-1963 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1963.

The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1963?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://owncloud.org/about/security/advisories/oC-SA-2013-018/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1963?


Explain the CVE ID: What does the identifier CVE-2013-1964 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1964.

Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service (host crash), obtain sensitive information, or possibly have other impacts via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1964?

{'name': '59293', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59293'}, {'name': '55082', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/55082'}, {'name': '[oss-security] 20130418 Xen Security Advisory 50 (CVE-2013-1964) - grant table hypercall acquire/release imbalance', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/18/9'}, {'name': 'GLSA-201309-24', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201309-24.xml'}, {'name': 'DSA-2666', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2666'}, {'name': '1028459', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1028459'}, {'name': 'SUSE-SU-2014:0446', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html'}, {'name': 'FEDORA-2013-6723', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1964?


Explain the CVE ID: What does the identifier CVE-2013-1965 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1965.

Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.


Provide references for further information: Can you share references or external links related to CVE-2013-1965?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://struts.apache.org/development/2.x/docs/s2-012.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=967655'}, {'name': '60082', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60082'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1965?


Explain the CVE ID: What does the identifier CVE-2013-1966 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1966.

Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag.


Provide references for further information: Can you share references or external links related to CVE-2013-1966?

{'name': '60166', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60166'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=967656'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://struts.apache.org/development/2.x/docs/s2-013.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://cwiki.apache.org/confluence/display/WW/S2-013'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1966?


Explain the CVE ID: What does the identifier CVE-2013-1967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1967.

Cross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11.2, as used in ownCloud Server 5.0.x before 5.0.5 and 4.5.x before 4.5.10, allows remote attackers to inject arbitrary web script or HTML via the file parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-1967?

{'name': 'mediaelementjs-flashmediaelement-xss(83647)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83647'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/johndyer/mediaelement/commit/9223dc6bfc50251a9a3cba0210e71be80fc38ecd'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=955307'}, {'name': '[oss-security] 20130417 Fwd: Re: CVE Request: ownCloud 5.0.5 and 4.5.10', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q2/111'}, {'name': '53079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53079'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://owncloud.org/about/security/advisories/oC-SA-2013-017'}, {'name': '[oss-security] 20130421 ownCloud Security Advisories (2013-017, 2013-018)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2013/q2/133'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/johndyer/mediaelement/tree/2.11.1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1967?


Explain the CVE ID: What does the identifier CVE-2013-1968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1968.

Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name.


Provide references for further information: Can you share references or external links related to CVE-2013-1968?

{'name': '[subversion-announce] 20130531 Subversion 1.6.23 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvTxsMFeHgc8bK2V-2PrSrKoBffTi8%2BxbHA5tocrrewWew%40mail.gmail.com%3E'}, {'name': '[subversion-announce] 20130531 Apache Subversion 1.7.10 released', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://mail-archives.apache.org/mod_mbox/subversion-announce/201305.mbox/%3CCADkdwvRK51pQsybfvsAzjxQJrmVpL0fEa1K4WGkUP9Tzz6KFDw%40mail.gmail.com%3E'}, {'name': 'RHSA-2014:0255', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0255.html'}, {'name': 'USN-1893-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1893-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://subversion.apache.org/security/CVE-2013-1968-advisory.txt'}, {'name': 'DSA-2703', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2703'}, {'name': 'oval:org.mitre.oval:def:18986', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18986'}, {'name': 'openSUSE-SU-2013:1139', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-07/msg00015.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1968?


Explain the CVE ID: What does the identifier CVE-2013-1969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1969.

Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to the (1) htmlParseChunk and (2) xmldecl_done functions, as demonstrated by a buffer overflow in the xmlBufGetInputBase function.


Provide references for further information: Can you share references or external links related to CVE-2013-1969?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/libxml2/commit/?id=de0cc20c29cb3f056062925395e0f68d2250a46f'}, {'name': 'openSUSE-SU-2013:0729', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-04/msg00109.html'}, {'name': 'openSUSE-SU-2013:0945', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00081.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=690202'}, {'name': 'USN-1817-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1817-1'}, {'name': '[oss-security] 20130417 CVE request : libxml2 Multiple Use-After-Free Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/17/4'}, {'name': '53061', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53061'}, {'name': '[oss-security] 20130418 Re: CVE request : libxml2 Multiple Use-After-Free Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/19/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1969?


Explain the CVE ID: What does the identifier CVE-2013-1970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1970.


Provide references for further information: Can you share references or external links related to CVE-2013-1970?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1970?


Explain the CVE ID: What does the identifier CVE-2013-1971 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1971.

Cross-site scripting (XSS) vulnerability in the MP3 Player module for Drupal 6.x allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the file name of a MP3 file.


Provide references for further information: Can you share references or external links related to CVE-2013-1971?

{'name': 'drupal-mp3player-filename-xss(83649)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83649'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1972804'}, {'name': '59276', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59276'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1971?


Explain the CVE ID: What does the identifier CVE-2013-1972 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1972.

Cross-site request forgery (CSRF) vulnerability in the elFinder file manager module 6.x-0.x before 6.x-0.8 and 7.x-0.x before 7.x-0.8 for Drupal allows remote attackers to hijack the authentication of unspecified victims to create, modify, or delete files via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1972?

{'name': '20130417 [Security-news] SA-CONTRIB-2013-044 - elFinder file manager - Cross Site Request Forgery (CSRF)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2013-04/0237.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1972942'}, {'name': 'drupal-elfinderfilemanager-unspecified-csrf(83651)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83651'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1972084'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1972082'}, {'name': '92533', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/92533'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1972?


Explain the CVE ID: What does the identifier CVE-2013-1973 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1973.

The autocomplete callback in Autocomplete Widgets for Text and Number Fields (autocomplete_widgets) module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-rc1 does not properly handle node permissions, which allows remote authenticated users to obtain sensitive field values via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2013-1973?

{'name': '52996', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52996'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1971848'}, {'name': '92532', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/92532'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drupal.org/node/1972976'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://drupal.org/node/1971856'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1973?


Explain the CVE ID: What does the identifier CVE-2013-1976 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1976.

The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.


Provide references for further information: Can you share references or external links related to CVE-2013-1976?

{'name': 'RHSA-2013:0871', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0871.html'}, {'name': 'RHSA-2013:0869', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0869.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=927622'}, {'name': 'RHSA-2013:0870', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0870.html'}, {'name': 'RHSA-2013:0872', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0872.html'}, {'name': 'openSUSE-SU-2013:1306', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-08/msg00013.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1976?


Explain the CVE ID: What does the identifier CVE-2013-1977 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1977.

OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file.


Provide references for further information: Can you share references or external links related to CVE-2013-1977?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugs.launchpad.net/devstack/+bug/1168252'}, {'name': '[oss-security] 20130423 Re: CVE-2013-1977 - OpenStack keystone.conf insecure file permissions', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/23/7'}, {'name': '[oss-security] 20130419 CVE-2013-1977 - OpenStack keystone.conf insecure file permissions', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/19/2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1977?


Explain the CVE ID: What does the identifier CVE-2013-1978 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1978.

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an X Window System (XWD) image dump with more colors than color map entries.


Provide references for further information: Can you share references or external links related to CVE-2013-1978?

{'name': '64098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64098'}, {'name': 'RHSA-2013:1778', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-1778.html'}, {'name': 'GLSA-201603-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201603-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=953902'}, {'name': 'DSA-2813', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2813'}, {'name': 'USN-2051-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2051-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1978?


Explain the CVE ID: What does the identifier CVE-2013-1979 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1979.

The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2013-1979?

{'name': 'openSUSE-SU-2013:1187', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00018.html'}, {'name': 'FEDORA-2013-6537', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103750.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=955629'}, {'name': 'MDVSA-2013:176', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:176'}, {'name': 'SUSE-SU-2014:1316', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00006.html'}, {'name': 'FEDORA-2013-6999', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104480.html'}, {'name': '[oss-security] 20130428 Multiple Linux setuid output redirection vulnerabilities', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/29/1'}, {'name': 'SUSE-SU-2014:1319', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00007.html'}, {'name': 'openSUSE-SU-2013:1971', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-12/msg00129.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/83f1b4ba917db5dc5a061a44b3403ddb6e783494'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=83f1b4ba917db5dc5a061a44b3403ddb6e783494'}, {'name': 'SUSE-SU-2013:1182', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00016.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.11'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1979?


Explain the CVE ID: What does the identifier CVE-2013-1980 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1980.

Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers to execute arbitrary code via a crafted MASI file.


Provide references for further information: Can you share references or external links related to CVE-2013-1980?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/projects/xmp/files/libxmp/4.1.0/Changelog/view'}, {'name': '[oss-security] 20130422 Re: CVE request: libxmp MASI Parsing Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/04/22/12'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=954658'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/p/xmp/libxmp/ci/a015fdfb478a60172fd225632a11bbd02870fc40'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://build.opensuse.org/request/show/174356'}, {'name': '53114', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/53114'}, {'name': '59355', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/59355'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1980?


Explain the CVE ID: What does the identifier CVE-2013-1981 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1981.

Multiple integer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XQueryFont, (2) _XF86BigfontQueryFont, (3) XListFontsWithInfo, (4) XGetMotionEvents, (5) XListHosts, (6) XGetModifierMapping, (7) XGetPointerMapping, (8) XGetKeyboardMapping, (9) XGetWindowProperty, (10) XGetImage, (11) LoadColornameDB, (12) XrmGetFileDatabase, (13) _XimParseStringFile, or (14) TransFileName functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1981?

{'name': '60120', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60120'}, {'name': 'FEDORA-2013-9079', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106781.html'}, {'name': 'USN-1854-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1854-1'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}, {'name': 'DSA-2693', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2693'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1981?


Explain the CVE ID: What does the identifier CVE-2013-1982 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1982.

Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XcupGetReservedColormapEntries, (2) XcupStoreColors, (3) XdbeGetVisualInfo, (4) XeviGetVisualInfo, (5) XShapeGetRectangles, and (6) XSyncListSystemCounters functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1982?

{'name': 'USN-1857-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1857-1'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'name': 'openSUSE-SU-2013:1009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00139.html'}, {'name': 'DSA-2682', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2682'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1982?


Explain the CVE ID: What does the identifier CVE-2013-1983 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1983.

Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XFixesGetCursorImage function.


Provide references for further information: Can you share references or external links related to CVE-2013-1983?

{'name': 'DSA-2676', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2676'}, {'name': 'FEDORA-2013-9088', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106794.html'}, {'name': 'USN-1858-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1858-1'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'name': 'openSUSE-SU-2013:1014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00144.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1983?


Explain the CVE ID: What does the identifier CVE-2013-1984 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1984.

Multiple integer overflows in X.org libXi 1.7.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XGetDeviceControl, (2) XGetFeedbackControl, (3) XGetDeviceDontPropagateList, (4) XGetDeviceMotionEvents, (5) XIGetProperty, (6) XIGetSelectedEvents, (7) XGetDeviceProperties, and (8) XListInputDevices functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1984?

{'name': 'USN-1859-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1859-1'}, {'name': 'FEDORA-2013-9046', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html'}, {'name': 'openSUSE-SU-2013:1033', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}, {'name': 'DSA-2683', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2683'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1984?


Explain the CVE ID: What does the identifier CVE-2013-1985 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1985.

Integer overflow in X.org libXinerama 1.1.2 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the XineramaQueryScreens function.


Provide references for further information: Can you share references or external links related to CVE-2013-1985?

{'name': 'DSA-2691', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2691'}, {'name': 'openSUSE-SU-2013:1026', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00154.html'}, {'name': 'FEDORA-2013-9065', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106845.html'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'name': 'USN-1860-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1860-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1985?


Explain the CVE ID: What does the identifier CVE-2013-1986 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1986.

Multiple integer overflows in X.org libXrandr 1.4.0 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRRQueryOutputProperty and (2) XRRQueryProviderProperty functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1986?

{'name': 'FEDORA-2013-9056', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106857.html'}, {'name': 'USN-1862-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1862-1'}, {'name': 'openSUSE-SU-2013:1028', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00156.html'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'name': 'DSA-2684', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2684'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1986?


Explain the CVE ID: What does the identifier CVE-2013-1987 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1987.

Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRenderQueryFilters, (2) XRenderQueryFormats, and (3) XRenderQueryPictIndexValues functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1987?

{'name': 'USN-1863-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1863-1'}, {'name': 'FEDORA-2013-9052', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106862.html'}, {'name': 'openSUSE-SU-2013:1011', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00141.html'}, {'name': '60132', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60132'}, {'name': 'DSA-2677', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2677'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1987?


Explain the CVE ID: What does the identifier CVE-2013-1988 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1988.

Multiple integer overflows in X.org libXRes 1.0.6 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XResQueryClients and (2) XResQueryClientResources functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1988?

{'name': 'USN-1864-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1864-1'}, {'name': 'DSA-2688', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2688'}, {'name': 'openSUSE-SU-2013:1027', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00155.html'}, {'name': 'FEDORA-2013-9060', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106880.html'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1988?


Explain the CVE ID: What does the identifier CVE-2013-1989 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1989.

Multiple integer overflows in X.org libXv 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvQueryPortAttributes, (2) XvListImageFormats, and (3) XvCreateImage function.


Provide references for further information: Can you share references or external links related to CVE-2013-1989?

{'name': 'FEDORA-2013-9066', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106889.html'}, {'name': 'USN-1867-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1867-1'}, {'name': 'openSUSE-SU-2013:1010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00140.html'}, {'name': 'DSA-2674', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2674'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1989?


Explain the CVE ID: What does the identifier CVE-2013-1990 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1990.

Multiple integer overflows in X.org libXvMC 1.0.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XvMCListSurfaceTypes and (2) XvMCListSubpictureTypes functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1990?

{'name': 'openSUSE-SU-2013:1025', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00153.html'}, {'name': 'USN-1868-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1868-1'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'name': 'DSA-2675', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2675'}, {'name': 'FEDORA-2013-9099', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106766.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1990?


Explain the CVE ID: What does the identifier CVE-2013-1991 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1991.

Multiple integer overflows in X.org libXxf86dga 1.1.3 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XDGAQueryModes and (2) XDGASetMode functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1991?

{'name': 'DSA-2690', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2690'}, {'name': 'USN-1869-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1869-1'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'name': 'FEDORA-2013-9085', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106870.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1991?


Explain the CVE ID: What does the identifier CVE-2013-1992 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1992.

Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) DMXGetScreenAttributes, (2) DMXGetWindowAttributes, and (3) DMXGetInputAttributes functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1992?

{'name': 'FEDORA-2013-9078', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107024.html'}, {'name': 'USN-1852-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1852-1'}, {'name': 'DSA-2673', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2673'}, {'name': 'openSUSE-SU-2013:1029', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00157.html'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1992?


Explain the CVE ID: What does the identifier CVE-2013-1993 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1993.

Multiple integer overflows in X.org libGLX in Mesa 9.1.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XF86DRIOpenConnection and (2) XF86DRIGetClientDriverName functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1993?

{'name': '[Mesa-dev] 20130523 [PATCH:mesa 1/2] integer overflow in XF86DRIOpenConnection() [CVE-2013-1993 1/2]', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.freedesktop.org/archives/mesa-dev/2013-May/039720.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://advisories.mageia.org/MGASA-2013-0190.html'}, {'name': 'DSA-2678', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2678'}, {'name': 'openSUSE-SU-2013:0865', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00007.html'}, {'name': 'USN-1888-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1888-1'}, {'name': 'MDVSA-2013:181', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2013:181'}, {'name': 'RHSA-2013:0898', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0898.html'}, {'name': 'RHSA-2013:0897', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2013-0897.html'}, {'name': '[Mesa-dev] 20130523 [PATCH:mesa 2/2] integer overflow in XF86DRIGetClientDriverName() [CVE-2013-1993 2/2]', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.freedesktop.org/archives/mesa-dev/2013-May/039722.html'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1993?


Explain the CVE ID: What does the identifier CVE-2013-1994 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1994.

Multiple integer overflows in X.org libchromeXvMC and libchromeXvMCPro in openChrome 0.3.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) uniDRIOpenConnection and (2) uniDRIGetClientDriverName functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1994?

{'name': 'USN-1871-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1871-1'}, {'name': 'DSA-2679', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2679'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1994?


Explain the CVE ID: What does the identifier CVE-2013-1995 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1995.

X.org libXi 1.7.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the XListInputDevices function.


Provide references for further information: Can you share references or external links related to CVE-2013-1995?

{'name': 'USN-1859-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1859-1'}, {'name': 'FEDORA-2013-9046', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html'}, {'name': 'openSUSE-SU-2013:1033', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'name': '60124', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60124'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}, {'name': 'DSA-2683', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2683'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1995?


Explain the CVE ID: What does the identifier CVE-2013-1996 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1996.

X.org libFS 1.0.4 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to an unexpected sign extension in the FSOpenServer function.


Provide references for further information: Can you share references or external links related to CVE-2013-1996?

{'name': 'DSA-2687', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2687'}, {'name': 'USN-1853-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1853-1'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'name': '60130', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60130'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1996?


Explain the CVE ID: What does the identifier CVE-2013-1997 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1997.

Multiple buffer overflows in X.org libX11 1.5.99.901 (1.6 RC1) and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XAllocColorCells, (2) _XkbReadGetDeviceInfoReply, (3) _XkbReadGeomShapes, (4) _XkbReadGetGeometryReply, (5) _XkbReadKeySyms, (6) _XkbReadKeyActions, (7) _XkbReadKeyBehaviors, (8) _XkbReadModifierMap, (9) _XkbReadExplicitComponents, (10) _XkbReadVirtualModMap, (11) _XkbReadGetNamesReply, (12) _XkbReadGetMapReply, (13) _XimXGetReadData, (14) XListFonts, (15) XListExtensions, and (16) XGetFontPath functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1997?

{'name': 'FEDORA-2013-9079', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106781.html'}, {'name': 'USN-1854-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1854-1'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}, {'name': 'DSA-2693', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2693'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1997?


Explain the CVE ID: What does the identifier CVE-2013-1998 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1998.

Multiple buffer overflows in X.org libXi 1.7.1 and earlier allow X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the (1) XGetDeviceButtonMapping, (2) XIPassiveGrabDevice, and (3) XQueryDeviceState functions.


Provide references for further information: Can you share references or external links related to CVE-2013-1998?

{'name': 'USN-1859-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1859-1'}, {'name': 'FEDORA-2013-9046', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106913.html'}, {'name': 'openSUSE-SU-2013:1033', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00161.html'}, {'name': '60127', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/60127'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}, {'name': 'DSA-2683', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2683'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1998?


Explain the CVE ID: What does the identifier CVE-2013-1999 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1999.

Buffer overflow in X.org libXvMC 1.0.7 and earlier allows X servers to cause a denial of service (crash) and possibly execute arbitrary code via crafted length or index values to the XvMCGetDRInfo function.


Provide references for further information: Can you share references or external links related to CVE-2013-1999?

{'name': 'openSUSE-SU-2013:1025', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2013-06/msg00153.html'}, {'name': 'USN-1868-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-1868-1'}, {'name': '[oss-security] 20130523 Fwd: [ANNOUNCE] X.Org Security Advisory: Protocol handling issues  in X Window System client libraries', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2013/05/23/3'}, {'name': 'DSA-2675', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2013/dsa-2675'}, {'name': 'FEDORA-2013-9099', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106766.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.x.org/wiki/Development/Security/Advisory-2013-05-23'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-1999?


Explain the CVE ID: What does the identifier CVE-2014-0001 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0001.

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.


Provide references for further information: Can you share references or external links related to CVE-2014-0001?

{'name': '1029708', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029708'}, {'name': '52161', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/52161'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/2502.565.64'}, {'name': '102714', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/102714'}, {'name': 'RHSA-2014:0186', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0186.html'}, {'name': 'MDVSA-2014:029', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2014:029'}, {'name': '65298', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65298'}, {'name': 'mysql-cve20140001-bo(90901)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90901'}, {'name': '102713', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102713'}, {'name': 'RHSA-2014:0173', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0173.html'}, {'name': 'RHSA-2014:0189', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0189.html'}, {'name': 'RHSA-2014:0164', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0164.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1054592'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://mariadb.com/kb/en/mariadb-5535-changelog/'}, {'name': 'GLSA-201409-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201409-04.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0001?


Explain the CVE ID: What does the identifier CVE-2014-0002 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0002.

The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.


Provide references for further information: Can you share references or external links related to CVE-2014-0002?

{'name': '57125', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57125'}, {'name': 'RHSA-2014:0371', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0371.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://camel.apache.org/security-advisories.data/CVE-2014-0002.txt.asc'}, {'name': '57719', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57719'}, {'name': '65901', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65901'}, {'name': '57716', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57716'}, {'name': 'RHSA-2014:0372', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0372.html'}, {'name': '[camel-commits] 20190430 svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E'}, {'name': '[camel-commits] 20190524 svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0002?


Explain the CVE ID: What does the identifier CVE-2014-0003 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0003.

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.


Provide references for further information: Can you share references or external links related to CVE-2014-0003?

{'name': '57125', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57125'}, {'name': 'RHSA-2014:0254', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0254.html'}, {'name': 'RHSA-2014:0371', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0371.html'}, {'name': '65902', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65902'}, {'name': '57719', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57719'}, {'name': 'RHSA-2014:0245', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0245.html'}, {'name': '57716', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57716'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://camel.apache.org/security-advisories.data/CVE-2014-0003.txt.asc'}, {'name': 'RHSA-2014:0372', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0372.html'}, {'name': '[camel-commits] 20190430 svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d%40%3Ccommits.camel.apache.org%3E'}, {'name': '[camel-commits] 20190524 svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf%40%3Ccommits.camel.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0003?


Explain the CVE ID: What does the identifier CVE-2014-0004 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0004.

Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.


Provide references for further information: Can you share references or external links related to CVE-2014-0004?

{'name': 'openSUSE-SU-2014:0390', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-03/msg00053.html'}, {'name': 'openSUSE-SU-2014:0389', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-03/msg00052.html'}, {'name': 'openSUSE-SU-2014:0388', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-03/msg00051.html'}, {'name': 'RHSA-2014:0293', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0293.html'}, {'name': '[devkit-devel] 20140310 udisks 2.1.3 / 1.0.5 security updates', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.freedesktop.org/archives/devkit-devel/2014-March/001568.html'}, {'name': 'USN-2142-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2142-1'}, {'name': '66081', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/66081'}, {'name': 'DSA-2872', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2872'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0004?


Explain the CVE ID: What does the identifier CVE-2014-0005 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0005.

PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote authenticated users to read and modify the application sever configuration and state by deploying a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2014-0005?

{'name': 'RHSA-2014:0345', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0345.html'}, {'name': 'RHSA-2015:0234', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0234.html'}, {'name': 'RHSA-2015:0720', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0720.html'}, {'name': 'RHSA-2015:0235', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-0235.html'}, {'name': 'RHSA-2014:0344', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0344.html'}, {'name': 'RHSA-2014:0343', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0343.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0005?


Explain the CVE ID: What does the identifier CVE-2014-0006 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0006.

The TempURL middleware in OpenStack Object Storage (Swift) 1.4.6 through 1.8.0, 1.9.0 through 1.10.0, and 1.11.0 allows remote attackers to obtain secret URLs by leveraging an object name and a timing side-channel attack.


Provide references for further information: Can you share references or external links related to CVE-2014-0006?

{'name': 'RHSA-2014:0232', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0232.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/swift/+bug/1265665'}, {'name': '[oss-security] 20140117 [OSSA 2014-002] Swift TempURL timing attack (CVE-2014-0006)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/01/17/5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0006?


Explain the CVE ID: What does the identifier CVE-2014-0007 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0007.

The Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter to tftp/fetch_boot_file.


Provide references for further information: Can you share references or external links related to CVE-2014-0007?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://projects.theforeman.org/issues/6086'}, {'name': 'RHSA-2014:0770', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0770.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0007?


Explain the CVE ID: What does the identifier CVE-2014-0008 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0008.

lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report.


Provide references for further information: Can you share references or external links related to CVE-2014-0008?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=252414'}, {'name': '[oss-security] 20140120 Moodle security notifications public', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2014/01/20/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36721'}, {'name': 'FEDORA-2014-1396', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127533.html'}, {'name': 'FEDORA-2014-1377', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127510.html'}, {'name': '1029647', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029647'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0008?


Explain the CVE ID: What does the identifier CVE-2014-0009 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0009.

course/loginas.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 does not enforce the moodle/site:accessallgroups capability requirement for outside-group users in a SEPARATEGROUPS configuration, which allows remote authenticated users to perform "login as" actions via a direct request.


Provide references for further information: Can you share references or external links related to CVE-2014-0009?

{'name': '[oss-security] 20140120 Moodle security notifications public', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2014/01/20/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-42643'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=252415'}, {'name': 'FEDORA-2014-1396', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127533.html'}, {'name': 'FEDORA-2014-1377', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127510.html'}, {'name': '1029648', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029648'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0009?


Explain the CVE ID: What does the identifier CVE-2014-0010 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0010.

Multiple cross-site request forgery (CSRF) vulnerabilities in user/profile/index.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 allow remote attackers to hijack the authentication of administrators for requests that delete (1) categories or (2) fields.


Provide references for further information: Can you share references or external links related to CVE-2014-0010?

{'name': '[oss-security] 20140120 Moodle security notifications public', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://openwall.com/lists/oss-security/2014/01/20/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=252416'}, {'name': '102261', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102261'}, {'name': 'FEDORA-2014-1396', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127533.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-42883'}, {'name': '1029649', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029649'}, {'name': 'FEDORA-2014-1377', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-January/127510.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0010?


Explain the CVE ID: What does the identifier CVE-2014-0011 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0011.

Multiple heap-based buffer overflows in the ZRLE_DECODE function in common/rfb/zrleDecode.h in TigerVNC before 1.3.1, when NDEBUG is enabled, allow remote VNC servers to cause a denial of service (vncviewer crash) and possibly execute arbitrary code via vectors related to screen image rendering.


Provide references for further information: Can you share references or external links related to CVE-2014-0011?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1050928'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/TigerVNC/tigervnc/releases/tag/v1.3.1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0011?


Explain the CVE ID: What does the identifier CVE-2014-0012 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0012.

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.


Provide references for further information: Can you share references or external links related to CVE-2014-0012?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mitsuhiko/jinja2/pull/292'}, {'name': '56328', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56328'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1051421'}, {'name': '60738', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/60738'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mitsuhiko/jinja2/commit/acb672b6a179567632e032f547582f30fa2f4aa7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mitsuhiko/jinja2/pull/296'}, {'name': 'GLSA-201408-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-201408-13.xml'}, {'name': '[oss-security] 20140110 CVE assignment for jinja2', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/73'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0012?


Explain the CVE ID: What does the identifier CVE-2014-0013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0013.

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose context is set to a user-supplied primitive value and also contain the `{{this}}` special Handlebars variable.


Provide references for further information: Can you share references or external links related to CVE-2014-0013?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/#%21topic/ember-security/2kpXXCxISS4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://emberjs.com/blog/2014/01/14/ember-security-releases.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0013?


Explain the CVE ID: What does the identifier CVE-2014-0014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0014.

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the "{{group}}" Helper and a crafted payload.


Provide references for further information: Can you share references or external links related to CVE-2014-0014?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://groups.google.com/forum/#%21topic/ember-security/PSE4RzTi6l4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://emberjs.com/blog/2014/01/14/ember-security-releases.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0014?


Explain the CVE ID: What does the identifier CVE-2014-0015 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0015.

cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request.


Provide references for further information: Can you share references or external links related to CVE-2014-0015?

{'name': '56912', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56912'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5095862'}, {'name': 'SSA:2014-044-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2014&m=slackware-security.502652'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.apple.com/kb/HT6296'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/security/advisories/VMSA-2014-0012.html'}, {'name': '1029710', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1029710'}, {'name': 'FEDORA-2014-1876', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127627.html'}, {'name': 'openSUSE-SU-2014:0274', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-02/msg00066.html'}, {'name': 'APPLE-SA-2014-06-30-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html'}, {'name': '20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/534161/100/0/threaded'}, {'name': '65270', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65270'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html'}, {'name': 'DSA-2849', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2849'}, {'name': '59458', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59458'}, {'name': '20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2014/Dec/23'}, {'name': '56728', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56728'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10743'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html'}, {'name': 'FEDORA-2014-1864', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128408.html'}, {'name': '59475', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/59475'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://curl.haxx.se/docs/adv_20140129.html'}, {'name': 'USN-2097-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2097-1'}, {'name': '56734', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56734'}, {'name': '56731', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56731'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0015?


Explain the CVE ID: What does the identifier CVE-2014-0016 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0016.

stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the same process ID to use the same entropy pool and allows remote attackers to obtain private keys for EC (ECDSA) or DSA certificates.


Provide references for further information: Can you share references or external links related to CVE-2014-0016?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.stunnel.org/sdf_ChangeLog.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/attachment.cgi?id=870826&action=diff'}, {'name': '[oss-security] 20140305 libssh and stunnel PRNG flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/03/05/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1072180'}, {'name': '65964', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65964'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0016?


Explain the CVE ID: What does the identifier CVE-2014-0017 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0017.

The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid collision.


Provide references for further information: Can you share references or external links related to CVE-2014-0017?

{'name': 'USN-2145-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2145-1'}, {'name': 'DSA-2879', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2879'}, {'name': 'openSUSE-SU-2014:0366', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-03/msg00036.html'}, {'name': '57407', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/57407'}, {'name': '[oss-security] 20140305 libssh and stunnel PRNG flaws', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2014/03/05/1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.libssh.org/2014/03/04/libssh-0-6-3-security-release/'}, {'name': 'openSUSE-SU-2014:0370', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-03/msg00040.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1072191'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0017?


Explain the CVE ID: What does the identifier CVE-2014-0018 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0018.

Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container (MSC) service registry, which allows local users to modify the server via a crafted deployment.


Provide references for further information: Can you share references or external links related to CVE-2014-0018?

{'name': 'RHSA-2014:0170', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0170.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1052783'}, {'name': 'RHSA-2014:0172', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0172.html'}, {'name': '65591', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65591'}, {'name': 'RHSA-2014:0171', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2014-0171.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0018?


Explain the CVE ID: What does the identifier CVE-2014-0019 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0019.

Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.


Provide references for further information: Can you share references or external links related to CVE-2014-0019?

{'name': 'FEDORA-2014-1795', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128229.html'}, {'name': 'MDVSA-2014:033', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2014:033'}, {'name': '65201', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65201'}, {'name': '102612', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/102612'}, {'name': '[oss-security] 20140128 Socat security advisory 5 - PROXY-CONNECT address overflow', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/159'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dest-unreach.org/socat'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt'}, {'name': 'openSUSE-SU-2015:0760', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2015-04/msg00043.html'}, {'name': 'FEDORA-2014-1811', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128190.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0019?


Explain the CVE ID: What does the identifier CVE-2014-0020 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0020.

The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message.


Provide references for further information: Can you share references or external links related to CVE-2014-0020?

{'name': 'openSUSE-SU-2014:0326', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.pidgin.im/pidgin/main/rev/a167504359e5'}, {'name': 'RHSA-2014:0139', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2014-0139.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.pidgin.im/pidgin/main/rev/9f132a6855cd'}, {'name': 'DSA-2859', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2014/dsa-2859'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pidgin.im/news/security/?id=85'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.pidgin.im/pidgin/main/rev/4d9be297d399'}, {'name': 'openSUSE-SU-2014:0239', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.pidgin.im/pidgin/main/rev/6b0e0566af20'}, {'name': 'USN-2100-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2100-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.pidgin.im/pidgin/main/rev/7d0fb0c6d8d4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hg.pidgin.im/pidgin/main/rev/5845d9fa7084'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0020?


Explain the CVE ID: What does the identifier CVE-2014-0021 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0021.

Chrony before 1.29.1 has traffic amplification in cmdmon protocol


Provide references for further information: Can you share references or external links related to CVE-2014-0021?

{'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2014-0021'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0021'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/01/18/2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127837.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128753.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/01/17/9'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/01/18/1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/01/18/3'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.openwall.com/lists/oss-security/2014/01/19/1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/65035'}, {'tags': ['x_refsource_MISC'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/90925'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0021?


Explain the CVE ID: What does the identifier CVE-2014-0022 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0022.

The installUpdates function in yum-cron/yum-cron.py in yum 3.4.3 and earlier does not properly check the return value of the sigCheckPkg function, which allows remote attackers to bypass the RMP package signing restriction via an unsigned package.


Provide references for further information: Can you share references or external links related to CVE-2014-0022?

{'name': '65119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/65119'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://yum.baseurl.org/gitweb?p=yum.git%3Ba=commitdiff%3Bh=9df69e5794'}, {'name': '56637', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/56637'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1052440'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1057377'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0022?


Explain the CVE ID: What does the identifier CVE-2014-0023 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0023.

OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution


Provide references for further information: Can you share references or external links related to CVE-2014-0023?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0023'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2014-0023'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0023?


Explain the CVE ID: What does the identifier CVE-2014-0024 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0024.


Provide references for further information: Can you share references or external links related to CVE-2014-0024?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0024?


Explain the CVE ID: What does the identifier CVE-2014-0025 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0025.


Provide references for further information: Can you share references or external links related to CVE-2014-0025?


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0025?


Explain the CVE ID: What does the identifier CVE-2014-0026 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0026.

katello-headpin is vulnerable to CSRF in REST API


Provide references for further information: Can you share references or external links related to CVE-2014-0026?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0026'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2014-0026'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0026?


Explain the CVE ID: What does the identifier CVE-2014-0027 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0027.

The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav.  NOTE: some of these details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2014-0027?

{'name': 'FEDORA-2014-0579', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127776.html'}, {'name': '64791', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/64791'}, {'name': 'MDVSA-2014:032', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDVSA-2014:032'}, {'name': '101948', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/101948'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1048678'}, {'name': '[oss-security] 20140110 temporary file issue in flite', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://seclists.org/oss-sec/2014/q1/59'}, {'name': 'FEDORA-2014-0574', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2014-February/127748.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0027?


Explain the CVE ID: What does the identifier CVE-2014-0028 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0028.

libvirt 1.1.1 through 1.2.0 allows context-dependent attackers to bypass the domain:getattr and connect:search_domains restrictions in ACLs and obtain sensitive domain object information via a request to the (1) virConnectDomainEventRegister and (2) virConnectDomainEventRegisterAny functions in the event registration API.


Provide references for further information: Can you share references or external links related to CVE-2014-0028?

{'name': 'USN-2093-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2093-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://libvirt.org/news.html'}, {'name': '60895', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/60895'}, {'name': 'GLSA-201412-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201412-04.xml'}, {'name': 'openSUSE-SU-2014:0268', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2014-02/msg00060.html'}, {'name': '[libvirt] 20140115 [PATCH 0/4] CVE-2014-0028: domain events vs. ACL filtering', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://www.redhat.com/archives/libvir-list/2014-January/msg00684.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1048637'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0028?


Explain the CVE ID: What does the identifier CVE-2014-0029 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0029.

Multiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.


Provide references for further information: Can you share references or external links related to CVE-2014-0029?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1059433'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2014-0029?


Explain the CVE ID: What does the identifier CVE-2014-0030 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2014-0030.

The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.