CVE-2012-2373
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is...
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.
Exploit likelihood
What each source reports
NVD Score used
4.0
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.
- Record
CVE-2012-2373- CVSS 2.0
- 4.0 Medium
AV:L/AC:H/Au:N/C:N/I:N/A:C - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.
- Record
CVE-2012-2373- Updated
- 2026-11-02
EUVDEUVD-2012-2364 No score
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.
- Record
EUVD-2012-2364- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8cmc-rxq2-8w7g No score
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is...
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.
- Record
GHSA-8cmc-rxq2-8w7g- Weakness
- CWE-362
- Updated
- 2026-11-02
OSVSUSE-SU-2015:0481-1 No score
Security update for Linux kernel
The SUSE Linux Enterprise 11 Service Pack 2 kernel was updated to fix a regression introduced by the previous update:
* scsi_dh_alua: Incorrect reference counting in the SCSI ALUA
initialization code lead to system crashes on boot (bnc#858831).
As the update introducing the regression was marked security, this is also marked security even though this bug is not security relevant.
- Record
SUSE-SU-2015:0481-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2012-2373 No score
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) via a crafted application that triggers a race condition.
- Record
UBUNTU-CVE-2012-2373- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-develRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-docRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
Show 55 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-headersRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perfRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perfRed Hat:enterprise_linux:6::client From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernelRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-develRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-docRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perfRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perfRed Hat:enterprise_linux:6::computenode From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernelRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-bootwrapperRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-ppc64Red Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-s390xRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-develRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-docRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-kdumpRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-kdump-develRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perfRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perfRed Hat:enterprise_linux:6::server From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernelRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debugRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debug-develRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-i686Red Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-debuginfo-common-x86_64Red Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-develRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-docRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-firmwareRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
kernel-headersRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perfRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perf-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
python-perfRed Hat:enterprise_linux:6::workstation From an advisory covering 9 CVEs |
before 0:2.6.32-220.23.1.el6 | 0:2.6.32-220.23.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-2373 is a medium vulnerability (CVSS 4.0) in Linux Kernel, published May 18, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 17th percentile. No source names a fixed version.
References
kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5
rhn.redhat.com/errata/RHSA-2012-0743.html
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=26c191788f18129af0eb32a358cdaea0c7479626
openwall.com/lists/oss-security/2012/05/18/11
bugzilla.redhat.com/show_bug.cgi?id=822821
github.com/torvalds/linux/commit/26c191788f18129af0eb32a358cdaea0c7479626
Show 194 moreShow less
ubuntu.com/usn/usn-1529-1
marc.info?l=bugtraq&m=139447903326211&w=2
nvd.nist.gov/vuln/detail/CVE-2012-2373
git.kernel.org?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=26c191788f18129af0eb32a358cdaea0c7479626
github.com/advisories/GHSA-8cmc-rxq2-8w7g
access.redhat.com/errata/RHSA-2012:0743
access.redhat.com/security/updates/classification
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/kernel.html
bugzilla.redhat.com/show_bug.cgi?id=772894
bugzilla.redhat.com/show_bug.cgi?id=803793
bugzilla.redhat.com/show_bug.cgi?id=806722
bugzilla.redhat.com/show_bug.cgi?id=814149
bugzilla.redhat.com/show_bug.cgi?id=814278
bugzilla.redhat.com/show_bug.cgi?id=814657
bugzilla.redhat.com/show_bug.cgi?id=816151
bugzilla.redhat.com/show_bug.cgi?id=816226
bugzilla.redhat.com/show_bug.cgi?id=816289
bugzilla.redhat.com/show_bug.cgi?id=818504
bugzilla.redhat.com/show_bug.cgi?id=818505
bugzilla.redhat.com/show_bug.cgi?id=819614
bugzilla.redhat.com/show_bug.cgi?id=822754
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0743.json
access.redhat.com/security/cve/CVE-2012-0044
cve.org/CVERecord?id=CVE-2012-0044
nvd.nist.gov/vuln/detail/CVE-2012-0044
access.redhat.com/security/cve/CVE-2012-1179
cve.org/CVERecord?id=CVE-2012-1179
nvd.nist.gov/vuln/detail/CVE-2012-1179
access.redhat.com/security/cve/CVE-2012-2119
cve.org/CVERecord?id=CVE-2012-2119
nvd.nist.gov/vuln/detail/CVE-2012-2119
access.redhat.com/security/cve/CVE-2012-2121
cve.org/CVERecord?id=CVE-2012-2121
nvd.nist.gov/vuln/detail/CVE-2012-2121
access.redhat.com/security/cve/CVE-2012-2123
cve.org/CVERecord?id=CVE-2012-2123
nvd.nist.gov/vuln/detail/CVE-2012-2123
access.redhat.com/security/cve/CVE-2012-2136
cve.org/CVERecord?id=CVE-2012-2136
nvd.nist.gov/vuln/detail/CVE-2012-2136
access.redhat.com/security/cve/CVE-2012-2137
cve.org/CVERecord?id=CVE-2012-2137
nvd.nist.gov/vuln/detail/CVE-2012-2137
access.redhat.com/security/cve/CVE-2012-2372
cve.org/CVERecord?id=CVE-2012-2372
nvd.nist.gov/vuln/detail/CVE-2012-2372
access.redhat.com/security/cve/CVE-2012-2373
cve.org/CVERecord?id=CVE-2012-2373
suse.com/support/update/announcement/2015/suse-su-20150481-1
bugzilla.suse.com/556135
bugzilla.suse.com/578046
bugzilla.suse.com/624072
bugzilla.suse.com/651219
bugzilla.suse.com/676204
bugzilla.suse.com/688996
bugzilla.suse.com/698102
bugzilla.suse.com/703156
bugzilla.suse.com/704280
bugzilla.suse.com/705551
bugzilla.suse.com/708296
bugzilla.suse.com/708836
bugzilla.suse.com/713148
bugzilla.suse.com/714604
bugzilla.suse.com/715635
bugzilla.suse.com/716850
bugzilla.suse.com/716971
bugzilla.suse.com/718521
bugzilla.suse.com/718863
bugzilla.suse.com/718910
bugzilla.suse.com/718918
bugzilla.suse.com/720946
bugzilla.suse.com/721587
bugzilla.suse.com/721857
bugzilla.suse.com/722398
bugzilla.suse.com/722560
bugzilla.suse.com/723776
bugzilla.suse.com/725152
bugzilla.suse.com/725355
bugzilla.suse.com/725592
bugzilla.suse.com/728840
bugzilla.suse.com/729247
bugzilla.suse.com/729854
bugzilla.suse.com/730117
bugzilla.suse.com/730118
bugzilla.suse.com/730660
bugzilla.suse.com/731035
bugzilla.suse.com/731387
bugzilla.suse.com/731739
bugzilla.suse.com/732070
bugzilla.suse.com/732296
bugzilla.suse.com/732908
bugzilla.suse.com/733761
bugzilla.suse.com/734900
bugzilla.suse.com/735909
bugzilla.suse.com/736149
bugzilla.suse.com/736255
bugzilla.suse.com/736697
bugzilla.suse.com/738210
bugzilla.suse.com/738284
bugzilla.suse.com/738528
bugzilla.suse.com/738583
bugzilla.suse.com/738597
bugzilla.suse.com/738644
bugzilla.suse.com/738679
bugzilla.suse.com/739728
bugzilla.suse.com/739837
bugzilla.suse.com/740180
bugzilla.suse.com/740291
bugzilla.suse.com/741814
bugzilla.suse.com/741824
bugzilla.suse.com/742845
bugzilla.suse.com/742871
bugzilla.suse.com/743232
bugzilla.suse.com/743579
bugzilla.suse.com/744198
bugzilla.suse.com/744314
bugzilla.suse.com/744315
bugzilla.suse.com/744392
suse.com/security/cve/CVE-2011-1083
suse.com/security/cve/CVE-2011-2494
suse.com/security/cve/CVE-2011-4086
suse.com/security/cve/CVE-2011-4127
suse.com/security/cve/CVE-2011-4131
suse.com/security/cve/CVE-2011-4132
suse.com/security/cve/CVE-2012-0957
suse.com/security/cve/CVE-2012-1097
suse.com/security/cve/CVE-2012-1146
suse.com/security/cve/CVE-2012-1179
suse.com/security/cve/CVE-2012-1601
suse.com/security/cve/CVE-2012-2119
suse.com/security/cve/CVE-2012-2127
suse.com/security/cve/CVE-2012-2133
suse.com/security/cve/CVE-2012-2136
suse.com/security/cve/CVE-2012-2137
suse.com/security/cve/CVE-2012-2313
suse.com/security/cve/CVE-2012-2319
suse.com/security/cve/CVE-2012-2372
suse.com/security/cve/CVE-2012-2373
suse.com/security/cve/CVE-2012-2375
suse.com/security/cve/CVE-2012-2390
suse.com/security/cve/CVE-2012-2745
suse.com/security/cve/CVE-2012-3375
suse.com/security/cve/CVE-2012-3400
suse.com/security/cve/CVE-2012-3412
suse.com/security/cve/CVE-2012-3430
suse.com/security/cve/CVE-2012-4398
suse.com/security/cve/CVE-2012-4461
suse.com/security/cve/CVE-2012-4508
suse.com/security/cve/CVE-2012-4530
suse.com/security/cve/CVE-2012-4565
suse.com/security/cve/CVE-2012-5517
suse.com/security/cve/CVE-2012-6548
suse.com/security/cve/CVE-2012-6549
suse.com/security/cve/CVE-2013-0160
suse.com/security/cve/CVE-2013-0216
suse.com/security/cve/CVE-2013-0231
suse.com/security/cve/CVE-2013-0268
suse.com/security/cve/CVE-2013-0311
suse.com/security/cve/CVE-2013-0349
suse.com/security/cve/CVE-2013-0871
suse.com/security/cve/CVE-2013-0913
suse.com/security/cve/CVE-2013-0914
suse.com/security/cve/CVE-2013-1059
suse.com/security/cve/CVE-2013-1767
suse.com/security/cve/CVE-2013-1772
suse.com/security/cve/CVE-2013-1774
suse.com/security/cve/CVE-2013-1792
suse.com/security/cve/CVE-2013-1796
suse.com/security/cve/CVE-2013-1797
suse.com/security/cve/CVE-2013-1798
suse.com/security/cve/CVE-2013-1819
suse.com/security/cve/CVE-2013-1848
suse.com/security/cve/CVE-2013-1860
suse.com/security/cve/CVE-2013-1929
suse.com/security/cve/CVE-2013-1979
suse.com/security/cve/CVE-2013-2094
suse.com/security/cve/CVE-2013-2148
suse.com/security/cve/CVE-2013-2164
suse.com/security/cve/CVE-2013-2206
suse.com/security/cve/CVE-2013-2232
suse.com/security/cve/CVE-2013-2234
suse.com/security/cve/CVE-2013-2237
suse.com/security/cve/CVE-2013-2634
suse.com/security/cve/CVE-2013-2635
suse.com/security/cve/CVE-2013-2850
suse.com/security/cve/CVE-2013-2851
suse.com/security/cve/CVE-2013-2893
ubuntu.com/security/CVE-2012-2373
openwall.com/lists/oss-security/2012/05/18/5
ubuntu.com/security/notices/USN-1529-1
ubuntu.com/security/notices/USN-1533-1
ubuntu.com/security/notices/USN-1532-1
ubuntu.com/security/notices/USN-1514-1
ubuntu.com/security/notices/USN-1539-1
Left out here: 872 references. The JSON record has them.