CVE-2013-6050
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash)...
CVE-2013-6050 is a medium vulnerability (CVSS 4.3) in Twibright Links, published November 30, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.22%, the 69th percentile. Fixed in links2 2.8-1.
- Severity
- 4.3 MediumCVSS 2.0, NVD
- Exploit chance
- 1.22%EPSS, 69th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.8-1links2 +5 more
Description
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
links2Debian:12 | before 2.8-1 | 2.8-1 |
links2Debian:13 | before 2.8-1 | 2.8-1 |
links2Debian:14 | before 2.8-1 | 2.8-1 |
links2Debian:6.0 | before 2.3~pre1-1+squeeze2, plus listed versions 2.3~pre1-12.3~pre1-1+squeeze1 | 2.3~pre1-1+squeeze2 |
links2Debian:7 | before 2.7-1+deb7u1, plus listed versions 2.7-1 | 2.7-1+deb7u1 |
linksMageia:3 | before 2.7-4.1.mga3 | 2.7-4.1.mga3 |
What each source reports
NVD Score used
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
CVE-2013-6050- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE ListNo score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
CVE-2013-6050- Updated
- 2026-11-02
EUVDEUVD-2013-5879No score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
EUVD-2013-5879- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r8h3-f36j-28hwNo score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash)...
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
GHSA-r8h3-f36j-28hw- Updated
- 2026-11-02
OSVNo score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
CVE-2013-6050- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6050No score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
DEBIAN-CVE-2013-6050- Updated
- 2026-11-02
OSVMGASA-2013-0364No score
Updated links package fixes security vulnerability
Mikulas Patocka discovered an integer overflow in the parsing of HTML tables in the Links web browser. This can only be exploited when running Links in graphical mode (CVE-2013-6050)
- Record
MGASA-2013-0364- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-6050No score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
UBUNTU-CVE-2013-6050- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
debian.org/security/2013/dsa-2807
links.twibright.com/download/ChangeLog
nvd.nist.gov/vuln/detail/CVE-2013-6050
github.com/advisories/GHSA-r8h3-f36j-28hw
security-tracker.debian.org/tracker/CVE-2013-6050
advisories.mageia.org/MGASA-2013-0364.html
bugs.mageia.org/show_bug.cgi?id=11855
ubuntu.com/security/CVE-2013-6050
cve.org/CVERecord?id=CVE-2013-6050