CVE-2013-2024

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0.

• CWE-78

• http://www.openwall.com/lists/oss-security/2013/04/29/13Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/59320Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/cve-2013-2024Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85064Third Party Advisory, VDB Entry
• https://lists.nongnu.org/archive/html/chicken-announce/2013-04/msg00000.htmlMailing List, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-2024Third Party Advisory
• https://security.gentoo.org/glsa/201612-54Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/04/29/13Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/59320Third Party Advisory, VDB Entry
• https://access.redhat.com/security/cve/cve-2013-2024Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/85064Third Party Advisory, VDB Entry
• https://lists.nongnu.org/archive/html/chicken-announce/2013-04/msg00000.htmlMailing List, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-2024Third Party Advisory
• https://security.gentoo.org/glsa/201612-54Third Party Advisory

Published

Oct 31, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2018Multiple SQL injection vulnerabilities in BOINC allow remote…9.8
• CVE-2013-2019Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 all…
• CVE-2013-2020Integer underflow in the cli_scanpe function in pe.c in Clam…
• CVE-2013-2021pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attacker…
• CVE-2013-2022Multiple cross-site scripting (XSS) vulnerabilities in actio…
• CVE-2013-2023Cross-site scripting (XSS) vulnerability in actionscript/Jpl…
• CVE-2013-2025Cross-site scripting (XSS) vulnerability in Ushahidi Platfor…
• CVE-2013-2026Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-2027Jython 2.2.1 uses the current umask to set the privileges of…
• CVE-2013-2028The ngx_http_parse_chunked function in http/ngx_http_parse.c…
• CVE-2013-2029nagios.upgrade_to_v3.sh, as distributed by Red Hat and possi…
• CVE-2013-2030keystone/middleware/auth_token.py in OpenStack Nova Folsom, …