Search for vulnerabilities
Vulnerability details: VCID-xk9g-qn26-b3fc
Vulnerability ID VCID-xk9g-qn26-b3fc
Aliases CVE-2013-6420
Summary
Status Published
Exploitability 2.0
Weighted Severity 2.5
Risk 5.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-130 Improper Handling of Length Parameter Inconsistency
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.23786 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.23786 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.25073 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.28302 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
epss 0.29107 https://api.first.org/data/v1/epss?cve=CVE-2013-6420
cvssv2 5.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6420.json
https://api.first.org/data/v1/epss?cve=CVE-2013-6420
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6420
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1036830 https://bugzilla.redhat.com/show_bug.cgi?id=1036830
CVE-2013-6420;OSVDB-100979 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/30395.txt
CVE-2013-6420;OSVDB-100979 Exploit http://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html
RHSA-2013:1813 https://access.redhat.com/errata/RHSA-2013:1813
RHSA-2013:1814 https://access.redhat.com/errata/RHSA-2013:1814
RHSA-2013:1815 https://access.redhat.com/errata/RHSA-2013:1815
RHSA-2013:1824 https://access.redhat.com/errata/RHSA-2013:1824
RHSA-2013:1825 https://access.redhat.com/errata/RHSA-2013:1825
RHSA-2013:1826 https://access.redhat.com/errata/RHSA-2013:1826
USN-2055-1 https://usn.ubuntu.com/2055-1/
Data source Exploit-DB
Date added Dec. 17, 2013
Description PHP - 'openssl_x509_parse()' Memory Corruption
Ransomware campaign use Unknown
Source publication date Dec. 17, 2013
Exploit type dos
Platform php
Source update date Dec. 17, 2013
Source URL http://www.sektioneins.de/advisories/advisory-012013-php-openssl_x509_parse-memory-corruption-vulnerability.html
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.95817
EPSS Score 0.23786
Published At Aug. 2, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:34:23.864722+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/2055-1/ 37.0.0