{"id":"UBUNTU-CVE-2013-2298","details":"Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.","modified":"2025-07-16T07:31:15.980543Z","published":"2014-06-02T15:55:00Z","withdrawn":"2025-07-18T16:42:52Z","upstream":["CVE-2013-2298"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2013-2298"},{"type":"REPORT","url":"http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git;a=commitdiff;h=2fea03824925cbcb976f4191f4d8321e41a4d95b"},{"type":"REPORT","url":"http://www.openwall.com/lists/oss-security/2013/04/28"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2013-2298"}],"affected":[{"package":{"name":"boinc","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/boinc@7.2.42+dfsg-1?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.42+dfsg-1"}]}],"versions":["7.2.7+dfsg-1","7.2.22+dfsg-1","7.2.28+dfsg-1","7.2.33+dfsg-1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"boinc","binary_version":"7.2.42+dfsg-1"},{"binary_name":"boinc-amd-opencl","binary_version":"7.2.42+dfsg-1"},{"binary_name":"boinc-client","binary_version":"7.2.42+dfsg-1"},{"binary_name":"boinc-dbg","binary_version":"7.2.42+dfsg-1"},{"binary_name":"boinc-dev","binary_version":"7.2.42+dfsg-1"},{"binary_name":"boinc-manager","binary_version":"7.2.42+dfsg-1"},{"binary_name":"boinc-nvidia-cuda","binary_version":"7.2.42+dfsg-1"},{"binary_name":"libboinc-app-dev","binary_version":"7.2.42+dfsg-1"},{"binary_name":"libboinc-app7","binary_version":"7.2.42+dfsg-1"},{"binary_version":"7.2.42+dfsg-1","binary_name":"libboinc7"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2013/UBUNTU-CVE-2013-2298.json"}}],"schema_version":"1.7.3","severity":[{"type":"Ubuntu","score":"medium"}]}