QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2013-4132

Back to search

CVE-2013-4132

Published: Sep 16, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

KDE-Workspace 4.10.5 and earlier does not properly handle the return value of the glibc 2.17 crypt and pw_encrypt functions, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via (1) an invalid salt or a (2) DES or (3) MD5 encrypted password, when FIPS-140 is enable, to KDM or an (4) invalid password to KCheckPass.

VendorProductVersions

n/a

n/a

affected
n/a

References

openSUSE-SU-2013:1291
vendor-advisory
x_refsource_SUSE
openSUSE-SU-2013:1253
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now