VDB
CVE-2013-0339
CVE-2013-0339
PUBLISHED
CVSS 9.300000190734863 CRITICAL
In Tenable Security Nessus Network Monitor existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem in Komponenten von Drittanbietern wie c-ares, curl, libbzip2, libpcre, libxml2, sqlite und OpenSSL. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erhöhte Rechte.
EPSS 1.78% · 83.0th percentile
Risk Scores
CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
1.78%
83.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Open Source | Open Source libxml2 | |
| Dell | Dell NetWorker Server <19.10.0.6 | |
| Dell | Dell NetWorker <19.11.0.2 | |
| Dell | Dell NetWorker Server <19.11.0.2 |
Timeline
- Feb 26, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 17, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 24, 2023 EPSS Score
- Jul 15, 2023 EPSS Score
- Sep 6, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2013/wid-sec-w-2024-3393.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3393 advisory
- http://www.openwall.com/lists/oss-security/2013/02/22/3 advisory
- http://rhn.redhat.com/errata/RHSA-2013-0581.html advisory
- http://rhn.redhat.com/errata/RHSA-2013-0636.html advisory
- http://seclists.org/fulldisclosure/2013/Mar/215 advisory
- https://www.suse.com/support/update/announcement/2013/suse-su-20130744-1.html advisory
- https://www.suse.com/support/update/announcement/2013/suse-su-20130743-1.html advisory
- https://blogs.oracle.com/sunsecurity/entry/cve_2013_0338_denial_of advisory
- http://www.ubuntu.com/usn/usn-1904-1/ advisory
- http://www.ubuntu.com/usn/usn-1904-2/ advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00002.html advisory
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00000.html advisory
- https://www.suse.com/support/update/announcement/2013/suse-su-20131625-1.html advisory
- https://www.dell.com/support/kbdoc/de-de/000247018/dsa-2024-251-security-update-for-dell-networker-for-libxml2-2-9-0-vulnerabilities advisory
- https://www.dell.com/support/kbdoc/de-de/000255975/dsa-2024-451-security-update-for-dell-networker-for-libxml2-2-9-0-vulnerabilities advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1614.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1614 advisory
- https://de.tenable.com/security/tns-2023-34 advisory
- https://de.tenable.com/security/tns-2023-23 advisory