CVE-2013-0251

critical

Published 2013-03-19 · Modified 2026-04-29

CVSS v3

—

CVSS v2

10.0

VIR risk

10.0

Description

Stack-based buffer overflow in llogincircuit.cc in latd 1.25 through 1.30 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the llogin version.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2013-0251

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699625

OS impact

OS	Version	Status	Fixed in
debian	bullseye	fixed	`1.31`

Application impact

Vendor	Product	Versions
debian	latd	`1.25`
debian	latd	`1.26`
debian	latd	`1.27`
debian	latd	`1.28`
debian	latd	`1.29`
debian	latd	`1.30`

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699625
http://www.openwall.com/lists/oss-security/2013/02/04/3
http://www.openwall.com/lists/oss-security/2013/02/05/2
https://security-tracker.debian.org/tracker/CVE-2013-0251

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.