CVE-2013-1976

The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of...

6.9 MediumFix available

The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on (a) tomcat5-initd.log, (b) tomcat6-initd.log, (c) catalina.out, or (d) tomcat7-initd.log.

Exploit likelihood

0.37%Down 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

Record: CVE-2013-1976
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

Record: CVE-2013-1976
Updated: 2026-11-02

EUVDEUVD-2013-1964 No score

Record: EUVD-2013-1964
Updated: 2026-11-03

GitHub AdvisoriesGHSA-q878-9wf9-424m No score

The (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of...

Record: GHSA-q878-9wf9-424m
Weakness: CWE-59
Updated: 2026-11-02

OSVMGASA-2014-0082 No score

Updated tomcat6 packages fix multiple vulnerabilities and logging

Updated tomcat6 packages fix security vulnerabilities:

It was discovered that Tomcat incorrectly handled certain requests submitted using chunked transfer encoding. A remote attacker could use this flaw to cause the Tomcat server to stop responding, resulting in a denial of service (CVE-2012-3544).

A frame injection in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc (CVE-2013-1571)

A flaw was found in the way the tomcat6 init script handled the tomcat6-initd.log log file. A malicious web application deployed on Tomcat could use this flaw to perform a symbolic link attack to change the ownership of an arbitrary system file to that of the tomcat user, allowing them to escalate their privileges to root (CVE-2013-1976).

It was discovered that Tomcat incorrectly handled certain authentication requests. A remote attacker could possibly use this flaw to inject a request that would get executed with a victim's credentials (CVE-2013-2067).

Note: With this update, tomcat6-initd.log has been moved from /var/log/tomcat6/ to the /var/log/ directory.

Record: MGASA-2014-0082
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10153-1 No score

libmysqlclient-devel-10.0.22-3.8 on GA media

These are all security issues fixed in the libmysqlclient-devel-10.0.22-3.8 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10153-1
Updated: 2026-11-02

Show 6 moreShow less

OSVopenSUSE-SU-2024:10200-1 No score

libmysql56client18-32bit-5.6.34-1.1 on GA media

These are all security issues fixed in the libmysql56client18-32bit-5.6.34-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10200-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10446-1 No score

tomcat-8.0.36-3.3 on GA media

These are all security issues fixed in the tomcat-8.0.36-3.3 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10446-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:13441-1 No score

tomcat10-10.1.14-1.1 on GA media

These are all security issues fixed in the tomcat10-10.1.14-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:13441-1
Updated: 2026-11-02

OSVSUSE-RU-2023:3956-1 No score

Recommended update for mariadb104

This update for mariadb104 fixes the following issues:

Implement version 10.4 of MariaDB (jsc#PED-2455):
- It is possible to use more than one authentication plugin for each user account.
- The root user account is being created with the ability to use two authentication plugins.
- All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
- Is being supported for User Password Expiry, which is not active by default.
- Faster privilege checks for MariaDB setups with many user accounts or many database grants.
Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)

Record: SUSE-RU-2023:3956-1
Updated: 2026-11-02

OSVSUSE-RU-2023:4991-1 No score

Recommended update for mariadb104

This update for mariadb104 fixes the following issues:

Implement version 10.4 of MariaDB (jsc#PED-2455):
- It is possible to use more than one authentication plugin for each user account.
- The root user account is being created with the ability to use two authentication plugins.
- All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
- Is being supported for User Password Expiry, which is not active by default.
- Faster privilege checks for MariaDB setups with many user accounts or many database grants.
Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)

Record: SUSE-RU-2023:4991-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1337-1 No score

Security update for tomcat6

This update of tomcat6 fixes:

* apache-tomcat-CVE-2012-3544.patch (bnc#831119)
* use chown --no-dereference to prevent symlink attacks on log
  (bnc#822177#c7/prevents CVE-2013-1976)
* Fix tomcat init scripts generating malformed classpath (
  http://youtrack.jetbrains.com/issue/JT-18545
  <http://youtrack.jetbrains.com/issue/JT-18545> ) bnc#804992 (patch
  from m407)
* fix a typo in initscript (bnc#768772 )
* copy all shell scripts (bnc#818948)

Security Issue references:

* CVE-2012-3544
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3544>
* CVE-2013-1976
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1976>
* CVE-2012-0022
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0022>

Record: SUSE-SU-2015:1337-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`tomcat6` Mageia:3 From an advisory covering 4 CVEs	before 6.0.39-1.1.mga3	6.0.39-1.1.mga3
`tomcat6` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-admin-webapps` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-docs-webapp` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-el-2.1-api` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-javadoc` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-jsp-2.1-api` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-lib` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-servlet-2.5-api` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-webapps` Red Hat:enterprise_linux:6::client From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4

Show 146 moreShow less

Affected packages
Package	Affected	Fixed
`tomcat6` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-admin-webapps` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-docs-webapp` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-el-2.1-api` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-javadoc` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-jsp-2.1-api` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-lib` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-servlet-2.5-api` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-webapps` Red Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-el-2.1-api` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-jsp-2.1-api` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-lib` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-servlet-2.5-api` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-admin-webapps` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-docs-webapp` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-javadoc` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-webapps` Red Hat:enterprise_linux:6::server From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-el-2.1-api` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-jsp-2.1-api` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-lib` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-servlet-2.5-api` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-admin-webapps` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-docs-webapp` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-javadoc` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat6-webapps` Red Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs	before 0:6.0.24-55.el6_4	0:6.0.24-55.el6_4
`tomcat5` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-admin-webapps` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-common-lib` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-debuginfo` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-jasper` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-jasper-javadoc` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-jsp-2.0-api` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-jsp-2.0-api-javadoc` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-server-lib` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-servlet-2.4-api` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-servlet-2.4-api-javadoc` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat5-webapps` Red Hat:enterprise_linux:5::server	before 0:5.5.23-0jpp.40.el5_9	0:5.5.23-0jpp.40.el5_9
`tomcat6` Red Hat:jboss_enterprise_web_server:2::el5	before 0:6.0.35-12_patch_07.ep6.el5	0:6.0.35-12_patch_07.ep6.el5
`tomcat6-admin-webapps` Red Hat:jboss_enterprise_web_server:2::el5	before 0:6.0.35-12_patch_07.ep6.el5	0:6.0.35-12_patch_07.ep6.el5
`tomcat6-docs-webapp` Red Hat:jboss_enterprise_web_server:2::el5	before 0:6.0.35-12_patch_07.ep6.el5	0:6.0.35-12_patch_07.ep6.el5
`tomcat6-el-1.0-api` Red Hat:jboss_enterprise_web_server:2::el5	before 0:6.0.35-12_patch_07.ep6.el5	0:6.0.35-12_patch_07.ep6.el5
`tomcat6-javadoc` Red Hat:jboss_enterprise_web_server:2::el5	before 0:6.0.35-12_patch_07.ep6.el5	0:6.0.35-12_patch_07.ep6.el5
`tomcat6-jsp-2.1-api` Red Hat:jboss_enterprise_web_server:2::el5	before 0:6.0.35-12_patch_07.ep6.el5	0:6.0.35-12_patch_07.ep6.el5
`tomcat6-lib` Red Hat:jboss_enterprise_web_server:2::el5	before 0:6.0.35-12_patch_07.ep6.el5	0:6.0.35-12_patch_07.ep6.el5
`tomcat6-log4j` Red Hat:jboss_enterprise_web_server:2::el5	before 0:6.0.35-12_patch_07.ep6.el5	0:6.0.35-12_patch_07.ep6.el5
`tomcat6-servlet-2.5-api` Red Hat:jboss_enterprise_web_server:2::el5	before 0:6.0.35-12_patch_07.ep6.el5	0:6.0.35-12_patch_07.ep6.el5
`tomcat6-webapps` Red Hat:jboss_enterprise_web_server:2::el5	before 0:6.0.35-12_patch_07.ep6.el5	0:6.0.35-12_patch_07.ep6.el5
`tomcat7` Red Hat:jboss_enterprise_web_server:2::el5	before 0:7.0.30-5_patch_03.ep6.el5	0:7.0.30-5_patch_03.ep6.el5
`tomcat7-admin-webapps` Red Hat:jboss_enterprise_web_server:2::el5	before 0:7.0.30-5_patch_03.ep6.el5	0:7.0.30-5_patch_03.ep6.el5
`tomcat7-docs-webapp` Red Hat:jboss_enterprise_web_server:2::el5	before 0:7.0.30-5_patch_03.ep6.el5	0:7.0.30-5_patch_03.ep6.el5
`tomcat7-el-1.0-api` Red Hat:jboss_enterprise_web_server:2::el5	before 0:7.0.30-5_patch_03.ep6.el5	0:7.0.30-5_patch_03.ep6.el5
`tomcat7-javadoc` Red Hat:jboss_enterprise_web_server:2::el5	before 0:7.0.30-5_patch_03.ep6.el5	0:7.0.30-5_patch_03.ep6.el5
`tomcat7-jsp-2.2-api` Red Hat:jboss_enterprise_web_server:2::el5	before 0:7.0.30-5_patch_03.ep6.el5	0:7.0.30-5_patch_03.ep6.el5
`tomcat7-lib` Red Hat:jboss_enterprise_web_server:2::el5	before 0:7.0.30-5_patch_03.ep6.el5	0:7.0.30-5_patch_03.ep6.el5
`tomcat7-log4j` Red Hat:jboss_enterprise_web_server:2::el5	before 0:7.0.30-5_patch_03.ep6.el5	0:7.0.30-5_patch_03.ep6.el5
`tomcat7-servlet-3.0-api` Red Hat:jboss_enterprise_web_server:2::el5	before 0:7.0.30-5_patch_03.ep6.el5	0:7.0.30-5_patch_03.ep6.el5
`tomcat7-webapps` Red Hat:jboss_enterprise_web_server:2::el5	before 0:7.0.30-5_patch_03.ep6.el5	0:7.0.30-5_patch_03.ep6.el5
`tomcat6` Red Hat:jboss_enterprise_web_server:2::el6	before 0:6.0.35-33_patch_07.ep6.el6	0:6.0.35-33_patch_07.ep6.el6
`tomcat6-admin-webapps` Red Hat:jboss_enterprise_web_server:2::el6	before 0:6.0.35-33_patch_07.ep6.el6	0:6.0.35-33_patch_07.ep6.el6
`tomcat6-docs-webapp` Red Hat:jboss_enterprise_web_server:2::el6	before 0:6.0.35-33_patch_07.ep6.el6	0:6.0.35-33_patch_07.ep6.el6
`tomcat6-el-1.0-api` Red Hat:jboss_enterprise_web_server:2::el6	before 0:6.0.35-33_patch_07.ep6.el6	0:6.0.35-33_patch_07.ep6.el6
`tomcat6-javadoc` Red Hat:jboss_enterprise_web_server:2::el6	before 0:6.0.35-33_patch_07.ep6.el6	0:6.0.35-33_patch_07.ep6.el6
`tomcat6-jsp-2.1-api` Red Hat:jboss_enterprise_web_server:2::el6	before 0:6.0.35-33_patch_07.ep6.el6	0:6.0.35-33_patch_07.ep6.el6
`tomcat6-lib` Red Hat:jboss_enterprise_web_server:2::el6	before 0:6.0.35-33_patch_07.ep6.el6	0:6.0.35-33_patch_07.ep6.el6
`tomcat6-log4j` Red Hat:jboss_enterprise_web_server:2::el6	before 0:6.0.35-33_patch_07.ep6.el6	0:6.0.35-33_patch_07.ep6.el6
`tomcat6-servlet-2.5-api` Red Hat:jboss_enterprise_web_server:2::el6	before 0:6.0.35-33_patch_07.ep6.el6	0:6.0.35-33_patch_07.ep6.el6
`tomcat6-webapps` Red Hat:jboss_enterprise_web_server:2::el6	before 0:6.0.35-33_patch_07.ep6.el6	0:6.0.35-33_patch_07.ep6.el6
`tomcat7` Red Hat:jboss_enterprise_web_server:2::el6	before 0:7.0.30-7_patch_03.ep6.el6	0:7.0.30-7_patch_03.ep6.el6
`tomcat7-admin-webapps` Red Hat:jboss_enterprise_web_server:2::el6	before 0:7.0.30-7_patch_03.ep6.el6	0:7.0.30-7_patch_03.ep6.el6
`tomcat7-docs-webapp` Red Hat:jboss_enterprise_web_server:2::el6	before 0:7.0.30-7_patch_03.ep6.el6	0:7.0.30-7_patch_03.ep6.el6
`tomcat7-el-1.0-api` Red Hat:jboss_enterprise_web_server:2::el6	before 0:7.0.30-7_patch_03.ep6.el6	0:7.0.30-7_patch_03.ep6.el6
`tomcat7-javadoc` Red Hat:jboss_enterprise_web_server:2::el6	before 0:7.0.30-7_patch_03.ep6.el6	0:7.0.30-7_patch_03.ep6.el6
`tomcat7-jsp-2.2-api` Red Hat:jboss_enterprise_web_server:2::el6	before 0:7.0.30-7_patch_03.ep6.el6	0:7.0.30-7_patch_03.ep6.el6
`tomcat7-lib` Red Hat:jboss_enterprise_web_server:2::el6	before 0:7.0.30-7_patch_03.ep6.el6	0:7.0.30-7_patch_03.ep6.el6
`tomcat7-log4j` Red Hat:jboss_enterprise_web_server:2::el6	before 0:7.0.30-7_patch_03.ep6.el6	0:7.0.30-7_patch_03.ep6.el6
`tomcat7-servlet-3.0-api` Red Hat:jboss_enterprise_web_server:2::el6	before 0:7.0.30-7_patch_03.ep6.el6	0:7.0.30-7_patch_03.ep6.el6
`tomcat7-webapps` Red Hat:jboss_enterprise_web_server:2::el6	before 0:7.0.30-7_patch_03.ep6.el6	0:7.0.30-7_patch_03.ep6.el6
`tomcat5` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-admin-webapps` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-common-lib` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-jasper` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-jasper-eclipse` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-jasper-javadoc` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-jsp-2.0-api` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-jsp-2.0-api-javadoc` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-parent` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-server-lib` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-servlet-2.4-api` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-servlet-2.4-api-javadoc` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat5-webapps` Red Hat:jboss_enterprise_web_server:1::el5	before 0:5.5.33-33_patch_09.ep5.el5	0:5.5.33-33_patch_09.ep5.el5
`tomcat6` Red Hat:jboss_enterprise_web_server:1::el5	before 0:6.0.32-32_patch_09.ep5.el5	0:6.0.32-32_patch_09.ep5.el5
`tomcat6-admin-webapps` Red Hat:jboss_enterprise_web_server:1::el5	before 0:6.0.32-32_patch_09.ep5.el5	0:6.0.32-32_patch_09.ep5.el5
`tomcat6-docs-webapp` Red Hat:jboss_enterprise_web_server:1::el5	before 0:6.0.32-32_patch_09.ep5.el5	0:6.0.32-32_patch_09.ep5.el5
`tomcat6-el-1.0-api` Red Hat:jboss_enterprise_web_server:1::el5	before 0:6.0.32-32_patch_09.ep5.el5	0:6.0.32-32_patch_09.ep5.el5
`tomcat6-javadoc` Red Hat:jboss_enterprise_web_server:1::el5	before 0:6.0.32-32_patch_09.ep5.el5	0:6.0.32-32_patch_09.ep5.el5
`tomcat6-jsp-2.1-api` Red Hat:jboss_enterprise_web_server:1::el5	before 0:6.0.32-32_patch_09.ep5.el5	0:6.0.32-32_patch_09.ep5.el5
`tomcat6-lib` Red Hat:jboss_enterprise_web_server:1::el5	before 0:6.0.32-32_patch_09.ep5.el5	0:6.0.32-32_patch_09.ep5.el5
`tomcat6-log4j` Red Hat:jboss_enterprise_web_server:1::el5	before 0:6.0.32-32_patch_09.ep5.el5	0:6.0.32-32_patch_09.ep5.el5
`tomcat6-servlet-2.5-api` Red Hat:jboss_enterprise_web_server:1::el5	before 0:6.0.32-32_patch_09.ep5.el5	0:6.0.32-32_patch_09.ep5.el5
`tomcat6-webapps` Red Hat:jboss_enterprise_web_server:1::el5	before 0:6.0.32-32_patch_09.ep5.el5	0:6.0.32-32_patch_09.ep5.el5
`tomcat5` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-admin-webapps` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-common-lib` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-jasper` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-jasper-eclipse` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-jasper-javadoc` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-jsp-2.0-api` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-jsp-2.0-api-javadoc` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-parent` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-server-lib` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-servlet-2.4-api` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-servlet-2.4-api-javadoc` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat5-webapps` Red Hat:jboss_enterprise_web_server:1::el6	before 0:5.5.33-36_patch_09.ep5.el6	0:5.5.33-36_patch_09.ep5.el6
`tomcat6` Red Hat:jboss_enterprise_web_server:1::el6	before 0:6.0.32-35_patch_09.ep5.el6	0:6.0.32-35_patch_09.ep5.el6
`tomcat6-admin-webapps` Red Hat:jboss_enterprise_web_server:1::el6	before 0:6.0.32-35_patch_09.ep5.el6	0:6.0.32-35_patch_09.ep5.el6
`tomcat6-docs-webapp` Red Hat:jboss_enterprise_web_server:1::el6	before 0:6.0.32-35_patch_09.ep5.el6	0:6.0.32-35_patch_09.ep5.el6
`tomcat6-el-1.0-api` Red Hat:jboss_enterprise_web_server:1::el6	before 0:6.0.32-35_patch_09.ep5.el6	0:6.0.32-35_patch_09.ep5.el6
`tomcat6-javadoc` Red Hat:jboss_enterprise_web_server:1::el6	before 0:6.0.32-35_patch_09.ep5.el6	0:6.0.32-35_patch_09.ep5.el6
`tomcat6-jsp-2.1-api` Red Hat:jboss_enterprise_web_server:1::el6	before 0:6.0.32-35_patch_09.ep5.el6	0:6.0.32-35_patch_09.ep5.el6
`tomcat6-lib` Red Hat:jboss_enterprise_web_server:1::el6	before 0:6.0.32-35_patch_09.ep5.el6	0:6.0.32-35_patch_09.ep5.el6
`tomcat6-log4j` Red Hat:jboss_enterprise_web_server:1::el6	before 0:6.0.32-35_patch_09.ep5.el6	0:6.0.32-35_patch_09.ep5.el6
`tomcat6-servlet-2.5-api` Red Hat:jboss_enterprise_web_server:1::el6	before 0:6.0.32-35_patch_09.ep5.el6	0:6.0.32-35_patch_09.ep5.el6
`tomcat6-webapps` Red Hat:jboss_enterprise_web_server:1::el6	before 0:6.0.32-35_patch_09.ep5.el6	0:6.0.32-35_patch_09.ep5.el6
`mariadb104` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 221 CVEs	before 10.4.30-150100.3.5.10	10.4.30-150100.3.5.10
`python-mysqlclient` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 221 CVEs	before 1.4.6-150100.3.3.7	1.4.6-150100.3.3.7
`mariadb104` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 221 CVEs	before 10.4.30-150100.3.5.10	10.4.30-150100.3.5.10
`python-mysqlclient` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 221 CVEs	before 1.4.6-150100.3.3.7	1.4.6-150100.3.3.7
`mariadb104` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 221 CVEs	before 10.4.30-150100.3.5.10	10.4.30-150100.3.5.10
`python-mysqlclient` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 221 CVEs	before 1.4.6-150100.3.3.7	1.4.6-150100.3.3.7
`lz4` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 221 CVEs	before 1.8.0-3.5.2	1.8.0-3.5.2
`mariadb-connector-c` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 221 CVEs	before 3.1.22-2.35.1	3.1.22-2.35.1
`mariadb104` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 221 CVEs	before 10.4.30-8.5.46	10.4.30-8.5.46
`python-mysqlclient` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 221 CVEs	before 1.3.14-8.9.2	1.3.14-8.9.2
`lz4` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 221 CVEs	before 1.8.0-3.5.2	1.8.0-3.5.2
`mariadb-connector-c` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 221 CVEs	before 3.1.22-2.35.1	3.1.22-2.35.1
`mariadb104` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 221 CVEs	before 10.4.30-8.5.46	10.4.30-8.5.46
`python-mysqlclient` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 221 CVEs	before 1.3.14-8.9.2	1.3.14-8.9.2
`lz4` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 221 CVEs	before 1.8.0-3.5.2	1.8.0-3.5.2
`mariadb-connector-c` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 221 CVEs	before 3.1.22-2.35.1	3.1.22-2.35.1
`mariadb104` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 221 CVEs	before 10.4.30-8.5.46	10.4.30-8.5.46
`python-mysqlclient` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 221 CVEs	before 1.3.14-8.9.2	1.3.14-8.9.2
`mariadb` openSUSE:Tumbleweed From an advisory covering 23 CVEs	before 10.0.22-3.8	10.0.22-3.8
`tomcat` openSUSE:Tumbleweed From an advisory covering 10 CVEs	before 8.0.36-3.3	8.0.36-3.3
`tomcat10` openSUSE:Tumbleweed From an advisory covering 49 CVEs	before 10.1.14-1.1	10.1.14-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1976 is a medium vulnerability (CVSS 6.9) in Redhat Enterprise Linux, published July 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in tomcat5 0:5.5.23-0jpp.40.el5_9.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 378 references. The JSON record has them.