CVE-2013-6050
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash)...
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
CVE-2013-6050- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
CVE-2013-6050- Updated
- 2026-11-02
EUVDEUVD-2013-5879 No score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
EUVD-2013-5879- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r8h3-f36j-28hw No score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash)...
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
GHSA-r8h3-f36j-28hw- Updated
- 2026-11-02
OSV No score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
CVE-2013-6050- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6050 No score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
DEBIAN-CVE-2013-6050- Updated
- 2026-11-02
OSVMGASA-2013-0364 No score
Updated links package fixes security vulnerability
Mikulas Patocka discovered an integer overflow in the parsing of HTML tables in the Links web browser. This can only be exploited when running Links in graphical mode (CVE-2013-6050)
- Record
MGASA-2013-0364- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-6050 No score
Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables.
- Record
UBUNTU-CVE-2013-6050- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
links2Debian:12 |
before 2.8-1 | 2.8-1 |
links2Debian:13 |
before 2.8-1 | 2.8-1 |
links2Debian:14 |
before 2.8-1 | 2.8-1 |
links2Debian:6.0 |
before 2.3~pre1-1+squeeze2, plus listed versions 2.3~pre1-12.3~pre1-1+squeeze1 |
2.3~pre1-1+squeeze2 |
links2Debian:7 |
before 2.7-1+deb7u1, plus listed versions 2.7-1 |
2.7-1+deb7u1 |
linksMageia:3 |
before 2.7-4.1.mga3 | 2.7-4.1.mga3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6050 is a medium vulnerability (CVSS 4.3) in Twibright Links, published November 30, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.22%, the 68th percentile. Fixed in links2 2.8-1.
References
debian.org/security/2013/dsa-2807
links.twibright.com/download/ChangeLog
nvd.nist.gov/vuln/detail/CVE-2013-6050
github.com/advisories/GHSA-r8h3-f36j-28hw
security-tracker.debian.org/tracker/CVE-2013-6050
advisories.mageia.org/MGASA-2013-0364.html
bugs.mageia.org/show_bug.cgi?id=11855
ubuntu.com/security/CVE-2013-6050
cve.org/CVERecord?id=CVE-2013-6050