5904 matches found
UBUNTU-CVE-2025-2724
A vulnerability classified as problematic has been found in GNOME libgsf up to 1.14.53. Affected is the function sortingkeycopy. The manipulation of the argument Name leads to out-of-bounds read. It is possible to launch the attack on the local host. The vendor was contacted early about this...
CVE-2025-2724
CVE-2025-2724 relates to GNOME LibGSF’s sorting_key_copy function. Affected is the sorting_key_copy operation where manipulating the Name argument can cause an out-of-bounds read, potentially enabling local impact. Red Hat notes limited or no mitigations meeting security criteria. Ubuntu/Ubuntu-d...
CVE-2025-2724
Removed by vendor...
CVE-2025-2722
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid because pnparam is an input-output parameter...
CVE-2025-2722
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid because pnparam is an input-output parameter...
CVE-2025-2723
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid as the buffer pointed to by "data" must have...
CVE-2025-2723
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid as the buffer pointed to by "data" must have...
UBUNTU-CVE-2025-2722
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been declared as critical. This vulnerability affects the function gsfpropsettingscollectva. The manipulation of the argument nallocedparams leads to heap-based buffer overflow. Local access is required to approach this attack. The...
UBUNTU-CVE-2025-2723
A vulnerability was found in GNOME libgsf up to 1.14.53. It has been rated as critical. This issue affects the function gsfpropertysettingscollec. The manipulation of the argument nallocedparams leads to heap-based buffer overflow. Attacking locally is a requirement. The vendor was contacted earl...
CVE-2025-2723
CVE-2025-2723 is a confirmed issue in GNOME libgsf affecting the gsf_property_settings_collec function, where manipulation of the n_alloced_params argument can cause a heap-based buffer overflow. Public sources describe it for GNOME libgsf up to 1.14.53, with local access often noted as a prerequ...
CVE-2025-2723
Removed by vendor...
CVE-2025-2722
CVE-2025-2722 corresponds to a vulnerability in GNOME libgsf up to 1.14.53 affecting gsf_prop_settings_collect_va, where manipulation of n_alloced_params leads to a heap-based buffer overflow. Exploitation requires local access; documentation across Red Hat, SUSE, and Ubuntu references the issue,...
CVE-2025-2722
Removed by vendor...
CVE-2025-2721
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The code maintainer explains that "the call is invalid as the buffer pointed to by "data" must have...