145727 matches found
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine s390 PCI component. This vulnerability arises from improper handling of adapter interrupt forwarding, where enabling it multiple times for a zPCI device without prior unregistration can lead to resource overwriting and leakag...
Moderate: Red Hat Security Advisory: xz security update
An update for xz is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
xz: XZ Utils: Denial of Service via buffer overflow in index decoding
A flaw was found in XZ Utils. When the lzmaindexdecoder function processes an empty index, and a subsequent lzmaindexappend operation is performed, insufficient memory is allocated. This can lead to a buffer overflow, potentially causing a denial of service DoS for affected systems...
kernel: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine s390 PCI component. This vulnerability arises from improper handling of adapter interrupt forwarding, where enabling it multiple times for a zPCI device without prior unregistration can lead to resource overwriting and leakag...
Moderate: Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
freeipmi: FreeIPMI: stack-based buffer overflow in ipmi-oem Dell system info handler
A stack-based buffer overflow exists in FreeIPMI's ipmi-oem tool, in the Dell OEM handler for the get-system-info cmc-ipv6-info subcommand. The vulnerable function outputdellsysteminfocmcipv6info uses a 256-byte stack buffer but allows up to 65536 bytes of data to be copied from a BMC response...
FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem
A flaw was found in FreeIPMI. A stack-based buffer overflow in the ipmi-oem utility can lead to arbitrary code execution. This vulnerability can be exploited by a local user who executes a specially crafted ipmi-oem command, potentially when processing untrusted data from a remote source...
FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses
A flaw was found in FreeIPMI. This vulnerability, a stack-based buffer overflow, occurs when the software processes malformed Fujitsu System Event Log SEL responses. An attacker could exploit this by providing specially crafted SEL data, potentially requiring user interaction, to achieve arbitrar...
FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow
A flaw was found in FreeIPMI. A local attacker can exploit a stack-based buffer overflow vulnerability in the ipmi-oem utility when processing the dell get-system-info cmc-info subcommand. This can lead to arbitrary code execution, allowing the attacker to run malicious code on the affected syste...
FreeIPMI: FreeIPMI: Denial of Service via stack-based buffer over-read in ipmi-oem
A stack-based out-of-bounds read vulnerability was found in the FreeIPMI ipmi-oem utility. When processing an abnormally short response from a Baseboard Management Controller BMC, the application over-reads the buffer. A malicious BMC could exploit this to crash the client application Denial of...
FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow
A flaw was found in FreeIPMI. This vulnerability involves a stack-based buffer overflow that occurs when a Baseboard Management Controller BMC sends an oversized response during data reading. An attacker could exploit this by tricking an administrator into running FreeIPMI commands against a...
Moderate: Red Hat Security Advisory: freeipmi security, bug fix, and enhancement update
An update for freeipmi is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
python: python: Arbitrary file deletion via race condition during temporary directory cleanup
A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...
Important: Red Hat Security Advisory: python3.9 security update
An update for python3.9 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()
A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...
python: Use-after-free of a server-side SSLContext when sni_callback switches contexts
A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.snicallback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the...
bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...
Moderate: Red Hat Security Advisory: bind9.18 security update
An update for bind9.18 is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
A flaw was found in BIND 9. A remote attacker can cause a named resolver to stop functioning Denial of Service by inducing the victim resolver to send multiple queries for a DNSSEC-signed zone. If the attacker's authoritative server responds with a specific sequence of crafted answers that arrive...
Moderate: Red Hat Security Advisory: bind security update
An update for bind is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
Important: Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update
An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
net/http: golang: golang: Denial of Service via crafted HTTP Range headers
A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service DoS by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU...
crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates
A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority CA. A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitima...
firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Race condition, use-after-free in the Graphics: CanvasWebGL component...
firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component...
firefox: Site isolation issue in the Networking component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking component...
firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget
A flaw was found in Firefox. Incorrect boundary condition handling in the Win32 widget component allows an attacker to escape the browser's restricted sandbox environment. An attacker who has compromised a sandboxed content process could exploit this vulnerability to achieve privilege escalation...
firefox: Integer overflow in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...
firefox: Incorrect boundary conditions in the JavaScript Engine component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript Engine component...
firefox: Sandbox escape due to use-after-free in the Networking component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the Networking component...
firefox: Use-after-free in the JavaScript Engine: JIT component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine: JIT component...
firefox: Integer overflow in the Layout: Text and Fonts component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Layout: Text and Fonts component...
firefox: Use-after-free in the DOM: Bindings (WebIDL) component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Bindings WebIDL component...
firefox: Use-after-free in the Audio/Video: Playback component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video: Playback component...
firefox: thunderbird: Privilege escalation in the Application Update component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Application Update component...
firefox: Use-after-free in the SVG component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the SVG component...
firefox: Privilege escalation in the Panning and Zooming component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Panning and Zooming component...
firefox: JIT miscompilation in the JavaScript: WebAssembly component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript: WebAssembly component...
firefox: Use-after-free in the DOM: Animation component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Animation component...
firefox: Sandbox escape due to incorrect boundary conditions in the Networking component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Networking component...
firefox: Sandbox escape due to uninitialized memory in the DOM: Web Serial component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to uninitialized memory in the DOM: Web Serial component...
firefox: JIT miscompilation in the JavaScript Engine: JIT component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...
firefox: Incorrect boundary conditions in the JavaScript Engine component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript Engine component...
firefox: Other issue in the DOM: File component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Other issue in the DOM: File component...
firefox: Privilege escalation in the DOM: Navigation component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...
firefox: Mitigation bypass in the File Handling component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the File Handling component...
firefox: Frame poisoning in the Layout component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Frame poisoning in the Layout component...
firefox: Use-after-free in the Storage: Bucket File System component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Storage: Bucket File System component...