CVE-2013-2298 Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
HighCVSS 9.3
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/boinc(Debian:12) | < 7.0.65+dfsg-1 | 7.0.65+dfsg-1 |
| debian/boinc(Debian:13) | < 7.0.65+dfsg-1 | 7.0.65+dfsg-1 |
| debian/boinc(Debian:14) | < 7.0.65+dfsg-1 | 7.0.65+dfsg-1 |
| universityofcalifornia boinc client | = 7.0 | No fix listed |
| universityofcalifornia boinc client | = 7.0.1 | No fix listed |
| universityofcalifornia boinc client | = 7.0.2 | No fix listed |
| universityofcalifornia boinc client | = 7.0.3 | No fix listed |
| universityofcalifornia boinc client | = 7.0.5 | No fix listed |
| universityofcalifornia boinc client | = 7.0.6 | No fix listed |
| universityofcalifornia boinc client | = 7.0.7 | No fix listed |
| universityofcalifornia boinc client | = 7.0.8 | No fix listed |
| universityofcalifornia boinc client | = 7.0.9 | No fix listed |
| universityofcalifornia boinc client | = 7.0.10 | No fix listed |
| universityofcalifornia boinc client | = 7.0.11 | No fix listed |
| universityofcalifornia boinc client | = 7.0.12 | No fix listed |
| universityofcalifornia boinc client | = 7.0.13 | No fix listed |
| universityofcalifornia boinc client | = 7.0.14 | No fix listed |
| universityofcalifornia boinc client | = 7.0.15 | No fix listed |
| universityofcalifornia boinc client | = 7.0.16 | No fix listed |
| universityofcalifornia boinc client | = 7.0.17 | No fix listed |
| universityofcalifornia boinc client | = 7.0.18 | No fix listed |
| universityofcalifornia boinc client | = 7.0.19 | No fix listed |
| universityofcalifornia boinc client | = 7.0.20 | No fix listed |
| universityofcalifornia boinc client | = 7.0.21 | No fix listed |
| universityofcalifornia boinc client | = 7.0.22 | No fix listed |
Show 137 more
| Product | Affected versions | Fixed in |
|---|---|---|
| universityofcalifornia boinc client | = 7.0.23 | No fix listed |
| universityofcalifornia boinc client | = 7.0.24 | No fix listed |
| universityofcalifornia boinc client | = 7.0.25 | No fix listed |
| universityofcalifornia boinc client | = 7.0.26 | No fix listed |
| universityofcalifornia boinc client | = 7.0.27 | No fix listed |
| universityofcalifornia boinc client | = 7.0.28 | No fix listed |
| universityofcalifornia boinc client | = 7.0.29 | No fix listed |
| universityofcalifornia boinc client | = 7.0.30 | No fix listed |
| universityofcalifornia boinc client | = 7.0.31 | No fix listed |
| universityofcalifornia boinc client | = 7.0.32 | No fix listed |
| universityofcalifornia boinc client | = 7.0.33 | No fix listed |
| universityofcalifornia boinc client | = 7.0.34 | No fix listed |
| universityofcalifornia boinc client | = 7.0.35 | No fix listed |
| universityofcalifornia boinc client | = 7.0.36 | No fix listed |
| universityofcalifornia boinc client | = 7.0.45 | No fix listed |
| universityofcalifornia boinc client | = 7.0.46 | No fix listed |
| universityofcalifornia boinc client | = 7.0.47 | No fix listed |
| universityofcalifornia boinc client | = 7.0.48 | No fix listed |
| universityofcalifornia boinc client | = 7.0.49 | No fix listed |
| universityofcalifornia boinc client | = 7.0.50 | No fix listed |
| universityofcalifornia boinc client | = 7.0.51 | No fix listed |
| universityofcalifornia boinc client | = 7.0.52 | No fix listed |
| universityofcalifornia boinc client | = 7.0.53 | No fix listed |
| universityofcalifornia boinc client | = 7.0.54 | No fix listed |
| universityofcalifornia boinc client | = 7.0.55 | No fix listed |
| universityofcalifornia boinc client | = 7.0.56 | No fix listed |
| universityofcalifornia boinc client | = 7.0.57 | No fix listed |
| universityofcalifornia boinc client | = 7.0.58 | No fix listed |
| universityofcalifornia boinc client | = 7.0.59 | No fix listed |
| universityofcalifornia boinc client | = 7.0.60 | No fix listed |
| universityofcalifornia boinc client | = 7.0.61 | No fix listed |
| universityofcalifornia boinc client | = 7.0.62 | No fix listed |
| universityofcalifornia boinc client | = 7.0.63 | No fix listed |
| universityofcalifornia boinc client | = 7.0.64 | No fix listed |
| universityofcalifornia boinc client | = 7.0.65 | No fix listed |
| universityofcalifornia boinc client | = 7.0.66 | No fix listed |
| universityofcalifornia boinc client | = 7.0.67 | No fix listed |
| universityofcalifornia boinc client | = 7.0.68 | No fix listed |
| universityofcalifornia boinc client | = 7.0.69 | No fix listed |
| universityofcalifornia boinc client | = 7.0.70 | No fix listed |
| universityofcalifornia boinc client | = 7.0.71 | No fix listed |
| universityofcalifornia boinc client | = 7.0.72 | No fix listed |
| universityofcalifornia boinc client | = 7.0.73 | No fix listed |
| universityofcalifornia boinc client | = 7.0.74 | No fix listed |
| universityofcalifornia boinc client | = 7.0.75 | No fix listed |
| universityofcalifornia boinc client | = 7.0.76 | No fix listed |
| universityofcalifornia boinc client | = 7.0.77 | No fix listed |
| universityofcalifornia boinc client | = 7.0.78 | No fix listed |
| universityofcalifornia boinc client | = 7.0.79 | No fix listed |
| universityofcalifornia boinc client | = 7.0.80 | No fix listed |
| universityofcalifornia boinc client | = 7.1.0 | No fix listed |
| universityofcalifornia boinc client | = 7.1.1 | No fix listed |
| universityofcalifornia boinc client | = 7.1.2 | No fix listed |
| universityofcalifornia boinc client | = 7.1.3 | No fix listed |
| universityofcalifornia boinc client | = 7.1.4 | No fix listed |
| universityofcalifornia boinc client | = 7.1.5 | No fix listed |
| universityofcalifornia boinc client | = 7.1.6 | No fix listed |
| universityofcalifornia boinc client | = 7.1.7 | No fix listed |
| universityofcalifornia boinc client | = 7.1.8 | No fix listed |
| universityofcalifornia boinc client | = 7.1.9 | No fix listed |
| universityofcalifornia boinc client | = 7.1.10 | No fix listed |
| universityofcalifornia boinc client | = 7.1.11 | No fix listed |
| universityofcalifornia boinc client | = 7.1.12 | No fix listed |
| universityofcalifornia boinc client | = 7.1.13 | No fix listed |
| universityofcalifornia boinc client | = 7.1.14 | No fix listed |
| universityofcalifornia boinc client | = 7.1.15 | No fix listed |
| universityofcalifornia boinc client | = 7.1.16 | No fix listed |
| universityofcalifornia boinc client | = 7.1.17 | No fix listed |
| universityofcalifornia boinc client | = 7.1.18 | No fix listed |
| universityofcalifornia boinc client | = 7.1.19 | No fix listed |
| universityofcalifornia boinc client | = 7.1.20 | No fix listed |
| universityofcalifornia boinc client | = 7.1.21 | No fix listed |
| universityofcalifornia boinc client | = 7.2.0 | No fix listed |
| universityofcalifornia boinc client | = 7.2.1 | No fix listed |
| universityofcalifornia boinc client | = 7.2.2 | No fix listed |
| universityofcalifornia boinc client | = 7.2.3 | No fix listed |
| universityofcalifornia boinc client | = 7.2.4 | No fix listed |
| universityofcalifornia boinc client | = 7.2.5 | No fix listed |
| universityofcalifornia boinc client | = 7.2.6 | No fix listed |
| universityofcalifornia boinc client | = 7.2.7 | No fix listed |
| universityofcalifornia boinc client | = 7.2.8 | No fix listed |
| universityofcalifornia boinc client | = 7.2.9 | No fix listed |
| universityofcalifornia boinc client | = 7.2.10 | No fix listed |
| universityofcalifornia boinc client | = 7.2.11 | No fix listed |
| universityofcalifornia boinc client | = 7.2.12 | No fix listed |
| universityofcalifornia boinc client | = 7.2.13 | No fix listed |
| universityofcalifornia boinc client | = 7.2.14 | No fix listed |
| universityofcalifornia boinc client | = 7.2.15 | No fix listed |
| universityofcalifornia boinc client | = 7.2.16 | No fix listed |
| universityofcalifornia boinc client | = 7.2.17 | No fix listed |
| universityofcalifornia boinc client | = 7.2.18 | No fix listed |
| universityofcalifornia boinc client | = 7.2.19 | No fix listed |
| universityofcalifornia boinc client | = 7.2.20 | No fix listed |
| universityofcalifornia boinc client | = 7.2.21 | No fix listed |
| universityofcalifornia boinc client | = 7.2.22 | No fix listed |
| universityofcalifornia boinc client | = 7.2.23 | No fix listed |
| universityofcalifornia boinc client | = 7.2.24 | No fix listed |
| universityofcalifornia boinc client | = 7.2.25 | No fix listed |
| universityofcalifornia boinc client | = 7.2.26 | No fix listed |
| universityofcalifornia boinc client | = 7.2.27 | No fix listed |
| universityofcalifornia boinc client | = 7.2.28 | No fix listed |
| universityofcalifornia boinc client | = 7.2.29 | No fix listed |
| universityofcalifornia boinc client | = 7.2.31 | No fix listed |
| universityofcalifornia boinc client | = 7.2.32 | No fix listed |
| universityofcalifornia boinc client | = 7.2.33 | No fix listed |
| universityofcalifornia boinc client | = 7.2.34 | No fix listed |
| universityofcalifornia boinc client | = 7.2.35 | No fix listed |
| universityofcalifornia boinc client | = 7.2.36 | No fix listed |
| universityofcalifornia boinc client | = 7.2.37 | No fix listed |
| universityofcalifornia boinc client | = 7.2.38 | No fix listed |
| universityofcalifornia boinc client | = 7.2.39 | No fix listed |
| universityofcalifornia boinc client | = 7.2.40 | No fix listed |
| universityofcalifornia boinc client | = 7.2.41 | No fix listed |
| universityofcalifornia boinc client | = 7.2.42 | No fix listed |
| universityofcalifornia boinc client | = 7.2.43 | No fix listed |
| universityofcalifornia boinc client | = 7.2.44 | No fix listed |
| universityofcalifornia boinc client | = 7.2.47 | No fix listed |
| universityofcalifornia boinc client | = 7.3.0 | No fix listed |
| universityofcalifornia boinc client | = 7.3.1 | No fix listed |
| universityofcalifornia boinc client | = 7.3.2 | No fix listed |
| universityofcalifornia boinc client | = 7.3.3 | No fix listed |
| universityofcalifornia boinc client | = 7.3.4 | No fix listed |
| universityofcalifornia boinc client | = 7.3.5 | No fix listed |
| universityofcalifornia boinc client | = 7.3.6 | No fix listed |
| universityofcalifornia boinc client | = 7.3.7 | No fix listed |
| universityofcalifornia boinc client | = 7.3.8 | No fix listed |
| universityofcalifornia boinc client | = 7.3.9 | No fix listed |
| universityofcalifornia boinc client | = 7.3.10 | No fix listed |
| universityofcalifornia boinc client | = 7.3.11 | No fix listed |
| universityofcalifornia boinc client | = 7.3.12 | No fix listed |
| universityofcalifornia boinc client | = 7.3.13 | No fix listed |
| universityofcalifornia boinc client | = 7.3.14 | No fix listed |
| universityofcalifornia boinc client | = 7.3.15 | No fix listed |
| universityofcalifornia boinc client | = 7.3.16 | No fix listed |
| universityofcalifornia boinc client | = 7.3.17 | No fix listed |
| universityofcalifornia boinc client | = 7.3.18 | No fix listed |
| universityofcalifornia boinc client | = 7.3.19 | No fix listed |
References
- Debian Security Tracker CVE-2013-2298 vendor-advisory
- boinc.berkeley.edu
- FEDORA-2013-23734 vendor-advisory
- FEDORA-2013-23720 vendor-advisory
- 53192 third-party-advisory
- [boinc_projects] 20130227 security patches for scheduler mailing-list
- [oss-security] 20130428 Multiple vulnerabilities in BOINC mailing-list
- 59539 vdb-entry
- boinc-cve20132298-bo(83931) vdb-entry