CVE-2013-2298
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have...
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
Exploit likelihood
What each source reports
NVD Score used
9.3
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
- Record
CVE-2013-2298- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
- Record
CVE-2013-2298- Updated
- 2026-11-02
EUVDEUVD-2013-2244 No score
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
- Record
EUVD-2013-2244- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pjjf-j58m-gr8m No score
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have...
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
- Record
GHSA-pjjf-j58m-gr8m- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
- Record
CVE-2013-2298- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-2298 No score
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
- Record
DEBIAN-CVE-2013-2298- Updated
- 2026-11-02
OSVMGASA-2014-0460 No score
Updated boinc-client packages fix security vulnerability
Multiple stack overflow flaws were found in the way the XML parser of boinc-client, a Berkeley Open Infrastructure for Network Computing (BOINC) client for distributed computing, performed processing of certain XML files. A rogue BOINC server could provide a specially-crafted XML file that, when processed would lead to boinc-client executable crash (CVE-2013-2298).
Issues preventing the boinc-client service from working immediately after installation have been fixed as well.
- Record
MGASA-2014-0460- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-2298 No score
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
- Record
UBUNTU-CVE-2013-2298- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
boincDebian:12 |
before 7.0.65+dfsg-1 | 7.0.65+dfsg-1 |
boincDebian:13 |
before 7.0.65+dfsg-1 | 7.0.65+dfsg-1 |
boincDebian:14 |
before 7.0.65+dfsg-1 | 7.0.65+dfsg-1 |
boinc-clientMageia:3 |
before 7.2.42-1.2.mga3 | 7.2.42-1.2.mga3 |
boinc-clientMageia:4 |
before 7.2.42-1.2.mga4 | 7.2.42-1.2.mga4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2298 is a high vulnerability (CVSS 9.3) in Universityofcalifornia Boinc Client, published June 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.58%, the 85th percentile. Fixed in boinc 7.0.65+dfsg-1.
References
openwall.com/lists/oss-security/2013/04/28/3
lists.fedoraproject.org/pipermail/package-announce/2013-December/125125.html
secunia.com/advisories/53192
exchange.xforce.ibmcloud.com/vulnerabilities/83931
boinc.berkeley.edu/gitweb?p=boinc-v2.git%3Ba=commitdiff%3Bh=2fea03824925cbcb976f4191f4d8321e41a4d95b
thread.gmane.org/gmane.comp.distributed.boinc.user/3741
Show 13 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2013-December/125128.html
securityfocus.com/bid/59539
nvd.nist.gov/vuln/detail/CVE-2013-2298
boinc.berkeley.edu/gitweb?p=boinc-v2.git;a=commitdiff;h=2fea03824925cbcb976f4191f4d8321e41a4d95b
github.com/advisories/GHSA-pjjf-j58m-gr8m
security-tracker.debian.org/tracker/CVE-2013-2298
advisories.mageia.org/MGASA-2014-0460.html
bugs.mageia.org/show_bug.cgi?id=12129
bugs.mageia.org/show_bug.cgi?id=9108
bugs.mageia.org/show_bug.cgi?id=9109
ubuntu.com/security/CVE-2013-2298
openwall.com/lists/oss-security/2013/04/28
cve.org/CVERecord?id=CVE-2013-2298