Linux Kernel CVE Statistics

18 Linux Kernel CVEs in June 2013

Full month · Source: NIST NVD

May 2013 July 2013

In June 2013, 18 Linux kernel CVEs were published, sourced from the NIST National Vulnerability Database. Of these, 1 was rated Critical, 3 were rated High severity and 8 Medium. No CVEs from this month have been confirmed as actively exploited via the CISA KEV catalog. June's 18 CVEs represent 10% of all 2013 Linux kernel CVEs , up from May's 4 (a 350% month-over-month increase) .

18
Total CVEs
1
Critical
3
High
8
Medium
6
Low
0
KEV Exploited
All CVEs — June 2013 18 CVEs
All (18) Critical (1) High (3) Medium (8) Low (6)
CVE ID Package Severity CVSS Published Description
CVE-2011-1180 linux Critical 9.8 2013-06-08 Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux…
CVE-2013-2850 linux High 7.9 2013-06-07 Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parame…
CVE-2011-4087 linux High 7.5 2013-06-08 The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initi…
CVE-2011-4348 linux High 7.1 2013-06-08 Race condition in the sctp_rcv function in net/sctp/input.c in the Linux kernel before 2.6.29 allows remote attackers t…
CVE-2013-2852 linux Medium 6.9 2013-06-07 Format string vulnerability in the b43_request_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43…
CVE-2011-4604 linux Medium 6.8 2013-06-07 The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to …
CVE-2013-2851 linux Medium 6.0 2013-06-07 Format string vulnerability in the register_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows loc…
CVE-2013-2128 linux Medium 5.5 2013-06-07 The tcp_read_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption…
CVE-2013-2146 linux Medium 4.7 2013-06-07 arch/x86/kernel/cpu/perf_event_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabl…
CVE-2011-3619 linux Medium 4.6 2013-06-08 The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 3.0 does not properly handle in…
CVE-2013-1929 linux Medium 4.4 2013-06-07 Heap-based buffer overflow in the tg3_read_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel befo…
CVE-2011-4347 linux Medium 4.0 2013-06-08 The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.…
CVE-2011-1585 linux Low 3.3 2013-06-08 The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the a…
CVE-2013-2141 linux Low 2.1 2013-06-07 The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure,…
CVE-2013-2148 linux Low 2.1 2013-06-07 The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel through 3.9.4 does not initi…

Frequently Asked Questions

How many Linux kernel CVEs were published in June 2013?

18 Linux kernel CVEs were published in June 2013, sourced from the NIST National Vulnerability Database. Of these, 1 was rated Critical severity, 3 High, and 8 Medium.

How does June 2013 compare to other months?

June 2013's 18 CVEs represent 10% of all 2013 Linux kernel CVEs. Compared to May's 4 CVEs, this was a 350% increase month-over-month. View the full 2013 breakdown →

May 2013 2013 statistics July 2013