Deskripsi CVE

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

Informasi CVE

Kelemahan Terkait

CWE-ID	Nama Kelemahan	Sumber
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	9.3		AV:N/AC:M/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Universityofcalifornia>>Boinc_client >> Version 7.0

Universityofcalifornia>>Boinc_client >> Version 7.0.1

Universityofcalifornia>>Boinc_client >> Version 7.0.2

Universityofcalifornia>>Boinc_client >> Version 7.0.3

Universityofcalifornia>>Boinc_client >> Version 7.0.5

Universityofcalifornia>>Boinc_client >> Version 7.0.6

Universityofcalifornia>>Boinc_client >> Version 7.0.7

Universityofcalifornia>>Boinc_client >> Version 7.0.8

Universityofcalifornia>>Boinc_client >> Version 7.0.9

Universityofcalifornia>>Boinc_client >> Version 7.0.10

Universityofcalifornia>>Boinc_client >> Version 7.0.11

Universityofcalifornia>>Boinc_client >> Version 7.0.12

Universityofcalifornia>>Boinc_client >> Version 7.0.13

Universityofcalifornia>>Boinc_client >> Version 7.0.14

Universityofcalifornia>>Boinc_client >> Version 7.0.15

Universityofcalifornia>>Boinc_client >> Version 7.0.16

Universityofcalifornia>>Boinc_client >> Version 7.0.17

Universityofcalifornia>>Boinc_client >> Version 7.0.18

Universityofcalifornia>>Boinc_client >> Version 7.0.19

Universityofcalifornia>>Boinc_client >> Version 7.0.20

Universityofcalifornia>>Boinc_client >> Version 7.0.21

Universityofcalifornia>>Boinc_client >> Version 7.0.22

Universityofcalifornia>>Boinc_client >> Version 7.0.23

Universityofcalifornia>>Boinc_client >> Version 7.0.24

Universityofcalifornia>>Boinc_client >> Version 7.0.25

Universityofcalifornia>>Boinc_client >> Version 7.0.26

Universityofcalifornia>>Boinc_client >> Version 7.0.27

Universityofcalifornia>>Boinc_client >> Version 7.0.28

Universityofcalifornia>>Boinc_client >> Version 7.0.29

Universityofcalifornia>>Boinc_client >> Version 7.0.30

Universityofcalifornia>>Boinc_client >> Version 7.0.31

Universityofcalifornia>>Boinc_client >> Version 7.0.32

Universityofcalifornia>>Boinc_client >> Version 7.0.33

Universityofcalifornia>>Boinc_client >> Version 7.0.34

Universityofcalifornia>>Boinc_client >> Version 7.0.35

Universityofcalifornia>>Boinc_client >> Version 7.0.36

Universityofcalifornia>>Boinc_client >> Version 7.0.45

Universityofcalifornia>>Boinc_client >> Version 7.0.46

Universityofcalifornia>>Boinc_client >> Version 7.0.47

Universityofcalifornia>>Boinc_client >> Version 7.0.48

Universityofcalifornia>>Boinc_client >> Version 7.0.49

Universityofcalifornia>>Boinc_client >> Version 7.0.50

Universityofcalifornia>>Boinc_client >> Version 7.0.51

Universityofcalifornia>>Boinc_client >> Version 7.0.52

Universityofcalifornia>>Boinc_client >> Version 7.0.53

Universityofcalifornia>>Boinc_client >> Version 7.0.54

Universityofcalifornia>>Boinc_client >> Version 7.0.55

Universityofcalifornia>>Boinc_client >> Version 7.0.56

Universityofcalifornia>>Boinc_client >> Version 7.0.57

Universityofcalifornia>>Boinc_client >> Version 7.0.58

Universityofcalifornia>>Boinc_client >> Version 7.0.59

Universityofcalifornia>>Boinc_client >> Version 7.0.60

Universityofcalifornia>>Boinc_client >> Version 7.0.61

Universityofcalifornia>>Boinc_client >> Version 7.0.62

Universityofcalifornia>>Boinc_client >> Version 7.0.63

Universityofcalifornia>>Boinc_client >> Version 7.0.64

Universityofcalifornia>>Boinc_client >> Version 7.0.65

Universityofcalifornia>>Boinc_client >> Version 7.0.66

Universityofcalifornia>>Boinc_client >> Version 7.0.67

Universityofcalifornia>>Boinc_client >> Version 7.0.68

Universityofcalifornia>>Boinc_client >> Version 7.0.69

Universityofcalifornia>>Boinc_client >> Version 7.0.70

Universityofcalifornia>>Boinc_client >> Version 7.0.71

Universityofcalifornia>>Boinc_client >> Version 7.0.72

Universityofcalifornia>>Boinc_client >> Version 7.0.73

Universityofcalifornia>>Boinc_client >> Version 7.0.74

Universityofcalifornia>>Boinc_client >> Version 7.0.75

Universityofcalifornia>>Boinc_client >> Version 7.0.76

Universityofcalifornia>>Boinc_client >> Version 7.0.77

Universityofcalifornia>>Boinc_client >> Version 7.0.78

Universityofcalifornia>>Boinc_client >> Version 7.0.79

Universityofcalifornia>>Boinc_client >> Version 7.0.80

Universityofcalifornia>>Boinc_client >> Version 7.1.0

Universityofcalifornia>>Boinc_client >> Version 7.1.1

Universityofcalifornia>>Boinc_client >> Version 7.1.2

Universityofcalifornia>>Boinc_client >> Version 7.1.3

Universityofcalifornia>>Boinc_client >> Version 7.1.4

Universityofcalifornia>>Boinc_client >> Version 7.1.5

Universityofcalifornia>>Boinc_client >> Version 7.1.6

Universityofcalifornia>>Boinc_client >> Version 7.1.7

Universityofcalifornia>>Boinc_client >> Version 7.1.8

Universityofcalifornia>>Boinc_client >> Version 7.1.9

Universityofcalifornia>>Boinc_client >> Version 7.1.10

Universityofcalifornia>>Boinc_client >> Version 7.1.11

Universityofcalifornia>>Boinc_client >> Version 7.1.12

Universityofcalifornia>>Boinc_client >> Version 7.1.13

Universityofcalifornia>>Boinc_client >> Version 7.1.14

Universityofcalifornia>>Boinc_client >> Version 7.1.15

Universityofcalifornia>>Boinc_client >> Version 7.1.16

Universityofcalifornia>>Boinc_client >> Version 7.1.17

Universityofcalifornia>>Boinc_client >> Version 7.1.18

Universityofcalifornia>>Boinc_client >> Version 7.1.19

Universityofcalifornia>>Boinc_client >> Version 7.1.20

Universityofcalifornia>>Boinc_client >> Version 7.1.21

Universityofcalifornia>>Boinc_client >> Version 7.2.0

Universityofcalifornia>>Boinc_client >> Version 7.2.1

Universityofcalifornia>>Boinc_client >> Version 7.2.2

Universityofcalifornia>>Boinc_client >> Version 7.2.3

Universityofcalifornia>>Boinc_client >> Version 7.2.4

Universityofcalifornia>>Boinc_client >> Version 7.2.5

Universityofcalifornia>>Boinc_client >> Version 7.2.6

Universityofcalifornia>>Boinc_client >> Version 7.2.7

Universityofcalifornia>>Boinc_client >> Version 7.2.8

Universityofcalifornia>>Boinc_client >> Version 7.2.9

Universityofcalifornia>>Boinc_client >> Version 7.2.10

Universityofcalifornia>>Boinc_client >> Version 7.2.11

Universityofcalifornia>>Boinc_client >> Version 7.2.12

Universityofcalifornia>>Boinc_client >> Version 7.2.13

Universityofcalifornia>>Boinc_client >> Version 7.2.14

Universityofcalifornia>>Boinc_client >> Version 7.2.15

Universityofcalifornia>>Boinc_client >> Version 7.2.16

Universityofcalifornia>>Boinc_client >> Version 7.2.17

Universityofcalifornia>>Boinc_client >> Version 7.2.18

Universityofcalifornia>>Boinc_client >> Version 7.2.19

Universityofcalifornia>>Boinc_client >> Version 7.2.20

Universityofcalifornia>>Boinc_client >> Version 7.2.21

Universityofcalifornia>>Boinc_client >> Version 7.2.22

Universityofcalifornia>>Boinc_client >> Version 7.2.23

Universityofcalifornia>>Boinc_client >> Version 7.2.24

Universityofcalifornia>>Boinc_client >> Version 7.2.25

Universityofcalifornia>>Boinc_client >> Version 7.2.26

Universityofcalifornia>>Boinc_client >> Version 7.2.27

Universityofcalifornia>>Boinc_client >> Version 7.2.28

Universityofcalifornia>>Boinc_client >> Version 7.2.29

Universityofcalifornia>>Boinc_client >> Version 7.2.31

Universityofcalifornia>>Boinc_client >> Version 7.2.32

Universityofcalifornia>>Boinc_client >> Version 7.2.33

Universityofcalifornia>>Boinc_client >> Version 7.2.34

Universityofcalifornia>>Boinc_client >> Version 7.2.35

Universityofcalifornia>>Boinc_client >> Version 7.2.36

Universityofcalifornia>>Boinc_client >> Version 7.2.37

Universityofcalifornia>>Boinc_client >> Version 7.2.38

Universityofcalifornia>>Boinc_client >> Version 7.2.39

Universityofcalifornia>>Boinc_client >> Version 7.2.40

Universityofcalifornia>>Boinc_client >> Version 7.2.41

Universityofcalifornia>>Boinc_client >> Version 7.2.42

Universityofcalifornia>>Boinc_client >> Version 7.2.43

Universityofcalifornia>>Boinc_client >> Version 7.2.44

Universityofcalifornia>>Boinc_client >> Version 7.2.47

Universityofcalifornia>>Boinc_client >> Version 7.3.0

Universityofcalifornia>>Boinc_client >> Version 7.3.1

Universityofcalifornia>>Boinc_client >> Version 7.3.2

Universityofcalifornia>>Boinc_client >> Version 7.3.3

Universityofcalifornia>>Boinc_client >> Version 7.3.4

Universityofcalifornia>>Boinc_client >> Version 7.3.5

Universityofcalifornia>>Boinc_client >> Version 7.3.6

Universityofcalifornia>>Boinc_client >> Version 7.3.7

Universityofcalifornia>>Boinc_client >> Version 7.3.8

Universityofcalifornia>>Boinc_client >> Version 7.3.9

Universityofcalifornia>>Boinc_client >> Version 7.3.10

Universityofcalifornia>>Boinc_client >> Version 7.3.11

Universityofcalifornia>>Boinc_client >> Version 7.3.12

Universityofcalifornia>>Boinc_client >> Version 7.3.13

Universityofcalifornia>>Boinc_client >> Version 7.3.14

Universityofcalifornia>>Boinc_client >> Version 7.3.15

Universityofcalifornia>>Boinc_client >> Version 7.3.16

Universityofcalifornia>>Boinc_client >> Version 7.3.17

Universityofcalifornia>>Boinc_client >> Version 7.3.18

Universityofcalifornia>>Boinc_client >> Version 7.3.19

Referensi

http://www.openwall.com/lists/oss-security/2013/04/28/3
Tags : mailing-list, x_refsource_MLIST

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125125.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/53192
Tags : third-party-advisory, x_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/83931
Tags : vdb-entry, x_refsource_XF

http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git%3Ba=commitdiff%3Bh=2fea03824925cbcb976f4191f4d8321e41a4d95b
Tags : x_refsource_CONFIRM

http://thread.gmane.org/gmane.comp.distributed.boinc.user/3741
Tags : mailing-list, x_refsource_MLIST

http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125128.html
Tags : vendor-advisory, x_refsource_FEDORA

http://www.securityfocus.com/bid/59539
Tags : vdb-entry, x_refsource_BID

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.18%	–	–
2022-02-13	–	–	1.18%	–	–
2022-04-03	–	–	1.18%	–	–
2022-06-19	–	–	1.18%	–	–
2022-09-18	–	–	1.18%	–	–
2023-02-26	–	–	1.18%	–	–
2023-03-12	–	–	–	1.84%	–
2023-04-16	–	–	–	1.84%	–
2023-05-07	–	–	–	1.84%	–
2023-05-28	–	–	–	1.84%	–
2023-11-12	–	–	–	0.8%	–
2024-01-14	–	–	–	0.79%	–
2024-02-11	–	–	–	0.79%	–
2024-06-02	–	–	–	0.79%	–
2024-06-16	–	–	–	0.79%	–
2024-12-22	–	–	–	0.79%	–
2025-01-19	–	–	–	0.79%	–
2025-02-16	–	–	–	0.79%	–
2025-02-16	–	–	–	0.79%	–
2025-03-18	–	–	–	–	1.4%
2025-03-30	–	–	–	–	2%
2025-04-15	–	–	–	–	2%
2025-11-10	–	–	–	–	1.88%
2025-11-18	–	–	–	–	1.88%
2025-11-21	–	–	–	–	1.88%
2026-01-16	–	–	–	–	1.59%
2026-03-22	–	–	–	–	1.59%

Tanggal	Persentil
2022-02-06	35%
2022-02-13	36%
2022-04-03	59%
2022-06-19	6%
2022-09-18	61%
2023-02-26	62%
2023-03-12	86%
2023-04-16	87%
2023-05-07	86%
2023-05-28	87%
2023-11-12	8%
2024-01-14	8%
2024-02-11	81%
2024-06-02	81%
2024-06-16	82%
2024-12-22	81%
2025-01-19	81%
2025-02-16	82%
2025-02-16	82%
2025-03-18	79%
2025-03-30	82%
2025-04-15	83%
2025-11-10	83%
2025-11-18	82%
2025-11-21	83%
2026-01-16	81%
2026-03-22	82%

CVE-2013-2298 : Detail

CVE-2013-2298