Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-8vek-ux8x-vkah
Vulnerability ID VCID-8vek-ux8x-vkah
Aliases CVE-2013-6420
Summary php: memory corruption in openssl_x509_parse()
Status Published
Exploitability 2.0
Weighted Severity 0.4
Risk 0.8
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-130 Improper Handling of Length Parameter Inconsistency
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.40224 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.40224 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
cvssv2 5.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6420.json
https://api.first.org/data/v1/epss?cve=CVE-2013-6420
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1036830 https://bugzilla.redhat.com/show_bug.cgi?id=1036830
CVE-2013-6420;OSVDB-100979 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/30395.txt
CVE-2013-6420;OSVDB-100979 Exploit http://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html
GLSA-201408-11 https://security.gentoo.org/glsa/201408-11
RHSA-2013:1813 https://access.redhat.com/errata/RHSA-2013:1813
RHSA-2013:1814 https://access.redhat.com/errata/RHSA-2013:1814
RHSA-2013:1815 https://access.redhat.com/errata/RHSA-2013:1815
RHSA-2013:1824 https://access.redhat.com/errata/RHSA-2013:1824
RHSA-2013:1825 https://access.redhat.com/errata/RHSA-2013:1825
RHSA-2013:1826 https://access.redhat.com/errata/RHSA-2013:1826
USN-2055-1 https://usn.ubuntu.com/2055-1/
Data source Exploit-DB
Date added Dec. 17, 2013
Description PHP - 'openssl_x509_parse()' Memory Corruption
Ransomware campaign use Unknown
Source publication date Dec. 17, 2013
Exploit type dos
Platform php
Source update date Dec. 17, 2013
Source URL http://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.97421
EPSS Score 0.40224
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T18:18:48.499216+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6420.json 38.6.0