CVE-2013-4412 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 75%

Affected Products (NVD)

Vendor	Product	Version
berlios	slim	𝑥 < 1.3.6
debian	debian_linux	6.0
debian	debian_linux	7.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

slim

bookworm	1.3.6-5.3 fixed
bullseye	1.3.6-5.2 fixed
sid	1.3.6-5.4 fixed
squeeze	not-affected
trixie	1.3.6-5.4 fixed
wheezy	not-affected

Ubuntu Releases

Ubuntu Product

Codename

slim

artful	ignored
bionic	not-affected
cosmic	ignored
disco	not-affected
lucid	ignored
precise	ignored
quantal	ignored
raring	ignored
saucy	ignored
trusty	dne
utopic	ignored
vivid	ignored
wily	ignored
xenial	not-affected
yakkety	ignored
zesty	ignored

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

http://www.openwall.com/lists/oss-security/2013/10/09/6

http://www.securityfocus.com/bid/62906

https://access.redhat.com/security/cve/cve-2013-4412

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4412

https://exchange.xforce.ibmcloud.com/vulnerabilities/89675

https://security-tracker.debian.org/tracker/CVE-2013-4412

http://www.openwall.com/lists/oss-security/2013/10/09/6

http://www.securityfocus.com/bid/62906

https://access.redhat.com/security/cve/cve-2013-4412

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4412

https://exchange.xforce.ibmcloud.com/vulnerabilities/89675

https://security-tracker.debian.org/tracker/CVE-2013-4412