CVE-2013-2298

N/A

Published: June 2, 2014 at 03:00 PM UTC

Updated: June 16, 2026 at 11:53 PM UTC

1 product affected across 1 vendorBoinc Client

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Boinc Client · Universityofcalifornia

95%

7.0 7.0.1 7.0.10 7.0.11 7.0.12 7.0.13 7.0.14 7.0.15 7.0.16 7.0.17 7.0.18 7.0.19 7.0.2 7.0.20 7.0.21 7.0.22 7.0.23 7.0.24 7.0.25 7.0.26 7.0.27 7.0.28 7.0.29 7.0.3 7.0.30 7.0.31 7.0.32 7.0.33 7.0.34 7.0.35 7.0.36 7.0.45 7.0.46 7.0.47 7.0.48 7.0.49 7.0.5 7.0.50 7.0.51 7.0.52 7.0.53 7.0.54 7.0.55 7.0.56 7.0.57 7.0.58 7.0.59 7.0.6 7.0.60 7.0.61 7.0.62 7.0.63 7.0.64 7.0.65 7.0.66 7.0.67 7.0.68 7.0.69 7.0.7 7.0.70 7.0.71 7.0.72 7.0.73 7.0.74 7.0.75 7.0.76 7.0.77 7.0.78 7.0.79 7.0.8 7.0.80 7.0.9 7.1.0 7.1.1 7.1.10 7.1.11 7.1.12 7.1.13 7.1.14 7.1.15 7.1.16 7.1.17 7.1.18 7.1.19 7.1.2 7.1.20 7.1.21 7.1.3 7.1.4 7.1.5 7.1.6 7.1.7 7.1.8 7.1.9 7.2.0 7.2.1 7.2.10 7.2.11 7.2.12 7.2.13 7.2.14 7.2.15 7.2.16 7.2.17 7.2.18 7.2.19 7.2.2 7.2.20 7.2.21 7.2.22 7.2.23 7.2.24 7.2.25 7.2.26 7.2.27 7.2.28 7.2.29 7.2.3 7.2.31 7.2.32 7.2.33 7.2.34 7.2.35 7.2.36 7.2.37 7.2.38 7.2.39 7.2.4 7.2.40 7.2.41 7.2.42 7.2.43 7.2.44 7.2.47 7.2.5 7.2.6 7.2.7 7.2.8 7.2.9 7.3.0 7.3.1 7.3.10 7.3.11 7.3.12 7.3.13 7.3.14 7.3.15 7.3.16 7.3.17 7.3.18 7.3.19 7.3.2 7.3.3 7.3.4 7.3.5 7.3.6 7.3.7 7.3.8 7.3.9

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (8)

x_refsource_CONFIRM

Source: [email protected]

http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git%3Ba=commitdiff%3Bh=2fea03824925cbcb976f4191f4d8321e41a4d95b

Vendor Advisoryx_refsource_FEDORA

Source: [email protected]

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125125.html

Vendor Advisoryx_refsource_FEDORA

Source: [email protected]

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125128.html

Third Party Advisoryx_refsource_SECUNIA

Source: [email protected]

http://secunia.com/advisories/53192

Mailing Listx_refsource_MLIST

Source: [email protected]

http://thread.gmane.org/gmane.comp.distributed.boinc.user/3741

Mailing Listx_refsource_MLIST

Source: [email protected]

http://www.openwall.com/lists/oss-security/2013/04/28/3

VDB Entryx_refsource_BID

Source: [email protected]

http://www.securityfocus.com/bid/59539

VDB Entryx_refsource_XF

Source: [email protected]

https://exchange.xforce.ibmcloud.com/vulnerabilities/83931

CVSS

9.3HIGH[email protected]

Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card