Vulnerability CVE-2013-0189

Vulnerability Name:

CVE-2013-0189 (CCN-81987)

Assigned:

2012-12-06

Published:

2013-01-17

Updated:

2023-02-13

Summary:

CVSS v3 Severity:

5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Consequences:

Denial of Service

References:

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: MITRE
Type: CNA
CVE-2013-0189

Source: secalert@redhat.com
Type: Patch
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: DEBIAN
Type: DSA-2631
squid3 -- denial of service

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: BID-57646
Squid 'cachemgr.cgi' Incomplete Fix Remote Denial of Service Vulnerability

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: SQUID-2012:1
Denial of service in cachemgr.cgi

Source: secalert@redhat.com
Type: Patch
secalert@redhat.com

Source: secalert@redhat.com
Type: Patch
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: CCN
Type: Red Hat Bugzilla Bug 895972
CVE-2013-0189 squid: Incomplete fix for the CVE-2012-5643 issue

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Source: XF
Type: UNKNOWN
squid-arguments-dos(81987)

Source: secalert@redhat.com
Type: UNKNOWN
secalert@redhat.com

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:squid-cache:squid:3.1:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.4:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.5:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.5.1:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.6:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.16:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.17:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.18:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.1:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.2:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.3:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.7:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.8:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.9:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.10:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.11:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.12:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.13:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.14:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.9:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.10:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

OR cpe:/a:squid-cache:squid:3.1.15:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.1.22:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.11:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.12:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.1:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.19:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.18:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.17:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.16:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.15:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.14:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.0.13:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.3:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.2:*:*:*:*:*:*:*

OR cpe:/a:squid-cache:squid:3.2.4:*:*:*:*:*:*:*

OR cpe:/o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20130189	V	CVE-2013-0189	2022-05-20
oval:org.opensuse.security:def:42439	P	Security update for qemu (Important)	2022-04-20
oval:org.opensuse.security:def:42440	P	Security update for python3 (Moderate)	2022-04-19
oval:org.opensuse.security:def:26186	P	Security update for libqt4 (Important)	2021-12-22
oval:org.opensuse.security:def:32252	P	Security update for chrony (Moderate)	2021-12-22
oval:org.opensuse.security:def:26185	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:31717	P	Security update for openssh (Important)	2021-12-06
oval:org.opensuse.security:def:31716	P	Security update for mozilla-nss (Important)	2021-12-06
oval:org.opensuse.security:def:32214	P	Security update for pcre (Moderate)	2021-11-10
oval:org.opensuse.security:def:32215	P	Security update for qemu (Important)	2021-11-10
oval:org.opensuse.security:def:32213	P	Security update for binutils (Moderate)	2021-11-09
oval:org.opensuse.security:def:26159	P	Security update for systemd (Moderate)	2021-11-04
oval:org.opensuse.security:def:26158	P	Security update for binutils (Moderate)	2021-11-02
oval:org.opensuse.security:def:26128	P	Security update for postgresql13 (Moderate)	2021-09-16
oval:org.opensuse.security:def:26129	P	Security update for gtk-vnc (Moderate)	2021-09-16
oval:org.opensuse.security:def:32996	P	Security update for xerces-c (Important)	2021-09-03
oval:org.opensuse.security:def:32995	P	Security update for file (Important)	2021-09-02
oval:org.opensuse.security:def:32165	P	Security update for cpio (Important)	2021-08-23
oval:org.opensuse.security:def:32164	P	Security update for java-1_8_0-openjdk (Important)	2021-08-20
oval:org.opensuse.security:def:32956	P	Security update for openexr (Important)	2021-06-24
oval:org.opensuse.security:def:32128	P	Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)	2021-06-18
oval:org.opensuse.security:def:32127	P	Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)	2021-06-18
oval:org.opensuse.security:def:42701	P	squid-2.7.STABLE5-2.12.16.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36295	P	squid3-3.1.12-8.16.20.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42702	P	squid3-3.1.12-8.16.20.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36294	P	squid-2.7.STABLE5-2.12.16.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:32109	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)	2021-06-04
oval:org.opensuse.security:def:32108	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-06-04
oval:org.opensuse.security:def:26048	P	Security update for the Linux Kernel (Important)	2021-05-13
oval:org.opensuse.security:def:26047	P	Security update for xen (Important)	2021-05-12
oval:org.opensuse.security:def:32071	P	Security update for qemu (Important)	2021-04-16
oval:org.opensuse.security:def:32070	P	Security update for clamav (Important)	2021-04-14
oval:org.opensuse.security:def:26212	P	Security update for python3 (Moderate)	2021-03-19
oval:org.opensuse.security:def:32275	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)	2021-03-17
oval:org.opensuse.security:def:32274	P	Security update for glib2 (Important)	2021-03-16
oval:org.opensuse.security:def:26211	P	Security update for glib2 (Important)	2021-03-16
oval:org.opensuse.security:def:32253	P	Security update for python (Important)	2021-02-11
oval:org.opensuse.security:def:32957	P	Security update for postgresql, postgresql12, postgresql13 (Important)	2021-01-26
oval:org.opensuse.security:def:36032	P	squid-2.7.STABLE5-2.12.12.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:36033	P	squid3-3.1.12-8.12.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:25856	P	Security update for gd (Important)	2020-12-01
oval:org.opensuse.security:def:26523	P	apache2-mod_perl on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25583	P	Security update for python36 (Important)	2020-12-01
oval:org.opensuse.security:def:31808	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:32319	P	Security update for ruby (Moderate)	2020-12-01
oval:org.opensuse.security:def:25582	P	Security update for libX11 (Important)	2020-12-01
oval:org.opensuse.security:def:32536	P	kdelibs3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31846	P	Security update for clamav (Important)	2020-12-01
oval:org.opensuse.security:def:32515	P	fuse on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33258	P	squid3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31773	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26299	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:27030	P	squid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25593	P	Security update for openvpn (Moderate)	2020-12-01
oval:org.opensuse.security:def:25923	P	Security update for util-linux (Moderate)	2020-12-01
oval:org.opensuse.security:def:26260	P	Security update for Mesa (Moderate)	2020-12-01
oval:org.opensuse.security:def:26996	P	nfs-client on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31499	P	Security update for python-paramiko (Important)	2020-12-01
oval:org.opensuse.security:def:25867	P	Security update for flash-player (Critical)	2020-12-01
oval:org.opensuse.security:def:26619	P	ntp on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26420	P	Security update for phpMyAdmin (Moderate)	2020-12-01
oval:org.opensuse.security:def:26576	P	krb5-plugin-kdb-ldap on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25920	P	Security update for gstreamer-plugins-base (Moderate)	2020-12-01
oval:org.opensuse.security:def:26270	P	Security update for mariadb-100 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31510	P	Security update for libX11 (Moderate)	2020-12-01
oval:org.opensuse.security:def:31865	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:25845	P	Security update for mariadb (Moderate)	2020-12-01
oval:org.opensuse.security:def:31809	P	Security update for apache2 (Moderate)	2020-12-01
oval:org.opensuse.security:def:32580	P	mozilla-xulrunner191 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25843	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:31978	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:32370	P	Recommended update for tboot (Moderate)	2020-12-01
oval:org.opensuse.security:def:32537	P	kdelibs4 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31847	P	Security update for clamav (Moderate)	2020-12-01
oval:org.opensuse.security:def:26313	P	Security update for python-requests (Moderate)	2020-12-01
oval:org.opensuse.security:def:25657	P	Security update for graphviz (Low)	2020-12-01
oval:org.opensuse.security:def:26007	P	Security update for libid3tag (Moderate)	2020-12-01
oval:org.opensuse.security:def:26300	P	Security update for gimp (Moderate)	2020-12-01
oval:org.opensuse.security:def:27031	P	squid3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25594	P	Security update for targetcli-fb (Moderate)	2020-12-01
oval:org.opensuse.security:def:25924	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:26261	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:27257	P	pam_krb5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31760	P	Security update for MozillaFirefox (Critical)	2020-12-01
oval:org.opensuse.security:def:26473	P	Security update for Chromium (Important)	2020-12-01
oval:org.opensuse.security:def:26620	P	openssh on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:26421	P	Security update for hdf5 (Important)	2020-12-01
oval:org.opensuse.security:def:31584	P	Security update for tcpdump	2020-12-01
oval:org.opensuse.security:def:31952	P	Security update for grub2 (Important)	2020-12-01
oval:org.opensuse.security:def:31511	P	Security update for python27-urllib3, python27-boto3, python27-botocore, python27-s3transfer (Moderate)	2020-12-01
oval:org.opensuse.security:def:31866	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:32475	P	Security update for xscreensaver (Moderate)	2020-12-01
oval:org.opensuse.security:def:33218	P	openssh on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31500	P	Security update for python-paramiko (Moderate)	2020-12-01
oval:org.opensuse.security:def:32426	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:32581	P	mutt on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25844	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:31979	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:32371	P	Security update for tcpdump (Moderate)	2020-12-01
oval:org.opensuse.security:def:26357	P	Security update for enigmail (Important)	2020-12-01
oval:org.opensuse.security:def:25785	P	Security update for flash-player (Critical)	2020-12-01
oval:org.opensuse.security:def:26314	P	Security update for iperf (Moderate)	2020-12-01
oval:org.opensuse.security:def:25658	P	Security update for liblouis (Low)	2020-12-01
oval:org.opensuse.security:def:26008	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26561	P	gstreamer-0_10-plugins-good on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27292	P	squid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25855	P	Security update for flash-player (Critical)	2020-12-01
oval:org.opensuse.security:def:26522	P	apache2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27258	P	pam_ldap on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31761	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:26474	P	Security update for znc (Moderate)	2020-12-01
oval:org.opensuse.security:def:32318	P	Security update for rsync (Moderate)	2020-12-01
oval:org.opensuse.security:def:25581	P	Security update for perl-XML-Twig (Moderate)	2020-12-01
oval:org.opensuse.security:def:31585	P	Security update for tcpdump (Moderate)	2020-12-01
oval:org.opensuse.security:def:31953	P	Security update for gstreamer-0_10-plugins-base (Moderate)	2020-12-01
oval:org.opensuse.security:def:32514	P	ft2demos on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33257	P	squid on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31772	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:32476	P	Security update for yast2-storage (Moderate)	2020-12-01
oval:org.opensuse.security:def:33219	P	openvpn on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31762	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:32427	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:26995	P	nagios-plugins on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:31498	P	Security update for python-numpy (Important)	2020-12-01
oval:org.opensuse.security:def:25866	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26358	P	Security update for Mozilla Thunderbird (Important)	2020-12-01
oval:org.opensuse.security:def:25786	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:26575	P	krb5-doc on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:25919	P	Security update for libplist (Moderate)	2020-12-01
oval:org.opensuse.security:def:26269	P	Security update for python3-requests (Moderate)	2020-12-01
oval:org.opensuse.security:def:26562	P	gtk2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27293	P	squid3 on GA media (Moderate)	2020-12-01
oval:org.mitre.oval:def:26199	P	SUSE-SU-2013:0327-1 -- Security update for squid	2014-09-08
oval:org.mitre.oval:def:26066	P	SUSE-SU-2013:0327-2 -- Security update for squid3	2014-09-08
oval:org.mitre.oval:def:18170	P	USN-1713-1 -- squid-cgi vulnerabilities	2014-07-21
oval:org.mitre.oval:def:18339	P	DSA-2631-1 squid3 - denial of service	2014-06-23
oval:com.ubuntu.precise:def:20130189000	V	CVE-2013-0189 on Ubuntu 12.04 LTS (precise) - medium.	2013-02-08

BACK