Every CVE Search/ Get API key

CVE-2013-2298

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have...

9.3 HighFix available

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

Exploit likelihood

2.58%Up 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

Record
CVE-2013-2298
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

Record
CVE-2013-2298
Updated
2026-11-02
EUVDEUVD-2013-2244 No score

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

Record
EUVD-2013-2244
Updated
2026-11-03
GitHub AdvisoriesGHSA-pjjf-j58m-gr8m No score

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have...

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

Record
GHSA-pjjf-j58m-gr8m
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

Record
CVE-2013-2298
Updated
2026-11-02
OSVDEBIAN-CVE-2013-2298 No score

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

Record
DEBIAN-CVE-2013-2298
Updated
2026-11-02
OSVMGASA-2014-0460 No score

Updated boinc-client packages fix security vulnerability

Multiple stack overflow flaws were found in the way the XML parser of boinc-client, a Berkeley Open Infrastructure for Network Computing (BOINC) client for distributed computing, performed processing of certain XML files. A rogue BOINC server could provide a specially-crafted XML file that, when processed would lead to boinc-client executable crash (CVE-2013-2298).

Issues preventing the boinc-client service from working immediately after installation have been fixed as well.

Record
MGASA-2014-0460
Updated
2026-11-02
OSVUBUNTU-CVE-2013-2298 No score

Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.

Record
UBUNTU-CVE-2013-2298
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
boinc
Debian:12
before 7.0.65+dfsg-1
7.0.65+dfsg-1
boinc
Debian:13
before 7.0.65+dfsg-1
7.0.65+dfsg-1
boinc
Debian:14
before 7.0.65+dfsg-1
7.0.65+dfsg-1
boinc-client
Mageia:3
before 7.2.42-1.2.mga3
7.2.42-1.2.mga3
boinc-client
Mageia:4
before 7.2.42-1.2.mga4
7.2.42-1.2.mga4

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-2298 is a high vulnerability (CVSS 9.3) in Universityofcalifornia Boinc Client, published June 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.58%, the 85th percentile. Fixed in boinc 7.0.65+dfsg-1.

References

Show 13 moreShow less
MoveEnter Open