Lucene search

MitreCVE-2013-7386

HistoryJun 02, 2014 - 3:55 p.m.

CVE-2013-7386

2014-06-0215:55:11

CWE-134

mitre

web.nvd.nist.gov

cve-2013-7386

vulnerability

format string

boinc

denial of service

remote execution

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.1

Confidence

High

EPSS

0.094

Percentile

94.8%

JSON

Format string vulnerability in the PROJECT::write_account_file function in client/cs_account.cpp in BOINC, possibly 7.2.33, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in the gui_urls item in an account file.

Affected configurations

Nvd

Node

rom_waltonboincMatch7.2.33

VendorProductVersionCPE
rom_waltonboinc7.2.33cpe:2.3:a:rom_walton:boinc:7.2.33:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rom_walton	boinc	7.2.33	cpe:2.3:a:rom_walton:boinc:7.2.33:::::::*

References

boinc.berkeley.edu/gitweb/?p=boinc-v2.git%3Ba=commitdiff%3Bh=99258dcecba8ef36e1ce0fd6e0dacffe53613ac9

lists.fedoraproject.org/pipermail/package-announce/2013-December/125125.html

lists.fedoraproject.org/pipermail/package-announce/2013-December/125128.html

www.openwall.com/lists/oss-security/2013/04/28/3

bugzilla.redhat.com/show_bug.cgi?id=957795

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

8.1

Confidence

High

EPSS

0.094

Percentile

94.8%

JSON

Related for CVE-2013-7386