2362 matches found
CVE-2023-52340
The CVE concerns the Linux kernel IPv6 implementation (net/ipv6/route.c) where a max_size threshold can be exhausted, enabling a denial-of-service condition (network is unreachable) when IPv6 packets loop via a raw socket. Affected: Linux kernel versions prior to 6.3. Impact is denial of service ...
CVE-2024-33869
Artifex Ghostscript versions before 10.03.1 are vulnerable to path traversal and command execution due to an improper input validation flaw in the base/gpmisc.c file. A crafted PostScript document can exploit the path reduction logic to bypass restrictions on the use of the %pipe% prefix, for exa...
CVE-2024-33870
Artifex Ghostscript versions prior to 10.03.1 are vulnerable to a path traversal issue. An attacker can use a crafted PostScript document to access arbitrary files if the current directory is within the permitted paths. This occurs because the software may improperly handle path transformations, ...
CVE-2024-29510
Artifex Ghostscript versions prior to 10.03.1 are vulnerable to memory corruption and a SAFER sandbox bypass due to a format string injection flaw. This vulnerability is triggered via a uniprint device , potentially allowing an attacker to achieve shell command execution . Practical exploitation ...
CVE-2024-29510
Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device...
CVE-2024-33869
An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur via a crafted PostScript document because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command output filename...
CVE-2024-33871
An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp and oprp devices can have an arbitrary name for a...
CVE-2024-33871
An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp and oprp devices can have an arbitrary name for a...
CVE-2024-29510
Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device...
CVE-2024-33870
An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal via a crafted PostScript document to arbitrary files if the current directory is in the permitted paths. For example, there can be a transformation of ../../foo to ./../../foo and this will grant access if ./ i...
CVE-2021-3079
Technical details for CVE-2021-3079 are not publicly available in the provided documents; monitor for updates.
CVE-2021-3066
Technical details for CVE-2021-3066 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2024-22232
CVE-2024-22232 describes a directory traversal in Salt’s file server triggered by a specially crafted URL. The underlying issue is input validation that allows traversal sequences, enabling a malicious user to read arbitrary files from a Salt master’s filesystem. Affected component: Salt master/f...
SUSE CVE-2024-37026
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Only use reserved BCS instances for usm migrate exec queue The GuC context scheduling queue is 2 entires deep, thus it is possible for a migration job to be stuck behind a fault if migration exec queue shares engines with...
DEBIAN-CVE-2024-37026
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Only use reserved BCS instances for usm migrate exec queue The GuC context scheduling queue is 2 entires deep, thus it is possible for a migration job to be stuck behind a fault if migration exec queue shares engines with...
UBUNTU-CVE-2024-37026
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Only use reserved BCS instances for usm migrate exec queue The GuC context scheduling queue is 2 entires deep, thus it is possible for a migration job to be stuck behind a fault if migration exec queue shares engines with...
CVE-2019-15797
Rejected reason: CVE ID was once reserved, but never used...
CVE-2020-35157
Rejected reason: CVE ID was once reserved, but never used...