Lucene search
+L

3403 matches found

Cvelist
Cvelist
added 2023/12/13 6:27 a.m.29 views

CVE-2023-6377 Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

7.8CVSS8.4AI score0.01587EPSS
SaveExploits0References19
CVE
CVE
added 2023/12/13 6:27 a.m.222 views

CVE-2023-6377

CVE-2023-6377 affects xorg-x11-server (XKB button actions) with out-of-bounds memory reads/writes. The flaw can enable local privilege escalation or remote code execution in scenarios involving X11 forwarding. Affected components cited across multiple advisories include xorg-server and related X1...

7.8CVSS8.3AI score0.01587EPSS
SaveExploits0References29Affected Software1
AlpineLinux
AlpineLinux
added 2023/12/13 6:27 a.m.34 views

CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

7.8CVSS8.5AI score0.01587EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/12/13 6:27 a.m.33 views

CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

7.8CVSS7.9AI score0.01587EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2023/12/13 6:27 a.m.44 views

CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved. Mitigation...

7.8CVSS8.2AI score0.01587EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2023/12/13 12:0 a.m.32 views

CVE-2023-6377

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege escalation or possible remote code execution in cases where X11 forwarding is involved...

7.8CVSS7.3AI score0.01587EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/12/12 12:0 a.m.6 views

PT-2023-8328

Name of the Vulnerable Software and Affected Versions xorg-x11-server affected versions not specified Description A flaw was found in xorg-server, related to the handling of XKB button actions, which can result in out-of-bounds memory reads and writes when querying or changing these actions, such...

7.8CVSS7.2AI score0.01587EPSS
SaveExploits0References164
RedHat Linux
RedHat Linux
added 2023/12/06 10:2 a.m.6 views

squid: Use-After-Free in the HTTP Collapsed Forwarding Feature

A flaw was found in Squid. The use of the HTTP Collapsed Forwarding configuration may allow an attacker to perform a denial of service remotely...

8.6CVSS5.8AI score0.04777EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/12/06 2:4 a.m.4 views

SUSE CVE-2023-49288

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

5.9CVSS6.6AI score0.04777EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2023/12/05 11:20 a.m.49 views

CVE-2023-49288

A flaw was found in Squid. The use of the HTTP Collapsed Forwarding configuration may allow an attacker to perform a denial of service remotely. Mitigation To mitigate this issue, lines for the 'collapsedforwarding' feature have to be removed from your squid.conf...

7.5CVSS7.5AI score0.04777EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/04 11:15 p.m.25 views

CVE-2023-49288

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

8.6CVSS0.04777EPSS
SaveExploits0References4
OSV
OSV
added 2023/12/04 11:15 p.m.6 views

AZL-32073 CVE-2023-49288 affecting package squid 5.7-5

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

7.5CVSS7.1AI score0.04777EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/04 11:15 p.m.1 views

DEBIAN-CVE-2023-49288

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

7.5CVSS6.6AI score0.04777EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/12/04 11:15 p.m.45 views

CVE-2023-49288

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

8.6CVSS7AI score0.04777EPSS
SaveExploits0References6
Prion
Prion
added 2023/12/04 11:15 p.m.40 views

Design/Logic Flaw

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

5CVSS6.9AI score0.04777EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/12/04 11:15 p.m.4 views

UBUNTU-CVE-2023-49288

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

8.6CVSS7.1AI score0.04777EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2023/12/04 10:49 p.m.45 views

CVE-2023-49288 Denial of Service in HTTP Collapsed Forwarding in Squid

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

8.6CVSS8.6AI score0.04777EPSS
SaveExploits0References4
CVE
CVE
added 2023/12/04 10:49 p.m.210 views

CVE-2023-49288

CVE-2023-49288 affects Squid: any 3.5–5.9 with collapsed_forwarding on is vulnerable to a Use-After-Free leading to DoS via collapsed forwarding. The fixed version is Squid 6.0.1; if upgrading isn’t possible, remove all collapsed_forwarding lines from squid.conf. Other connected sources confirm m...

8.6CVSS7.8AI score0.04777EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2023/12/04 10:49 p.m.34 views

CVE-2023-49288

Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to a Denial of Service attack via collapsed forwarding. All versions of Squid from 3.5 up to and including 5.9 configured with...

8.6CVSS7.7AI score0.04777EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/12/04 12:0 a.m.7 views

Squid Resource Management Error Vulnerability

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A resource management error vulnerability exists in versions prior to Squid 6.0.1, which stems from the presence of a...

8.6CVSS6.6AI score0.04777EPSS
SaveExploits0References4
Rows per page
Query Builder