What is the CVSS score of CVE-2013-6494?

CVE-2013-6494 has a CVSS 2.0 base score of 2.1 (Low). CVSS vector: AV:L/AC:L/Au:N/C:N/I:N/A:P. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2013-6494?

Yes, a patch is available for CVE-2013-6494. Update the affected software to the latest version immediately.

Fedup CVE-2013-6494

LOW

DEPRECATED: Code (CWE-17)

2014-12-02 secalert@redhat.com

Denial Of Service Fedup

2.1

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

AV:L/AC:L/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:L/Au:N/C:N/I:N/A:P

Attack Vector

Local

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Dec 02, 2014 - 01:59 cve.org

LOW 2.1

DescriptionCVE.org

fedup 0.9.0 in Fedora 19, 20, and 21 uses a temporary directory with a static name for its download cache, which allows local users to cause a denial of service (prevention of system updates).

AnalysisAI

fedup 0.9.0 in Fedora 19, 20, and 21 uses a temporary directory with a static name for its download cache, which allows local users to cause a denial of service (prevention of system updates). Rated low severity (CVSS 2.1), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-17. fedup 0.9.0 in Fedora 19, 20, and 21 uses a temporary directory with a static name for its download cache, which allows local users to cause a denial of service (prevention of system updates). Affected products include: Fedup Project Fedup.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.