CVE-2014-2423

CVE-2014-2423 is an unspecified vulnerability in the JAX-WS component affecting Oracle Java SE (6u71, 7u51, 8, and Embedded 7u51) with partial confidentiality, integrity, and availability impacts. Public IBM-related documentation maps this and related Java CPU entries to IBM SDK/JAVA packages, e....

CVE-2014-8650

Affected software: python-requests-Kerberos (Python) up to version 0.5. Root cause: mutual authentication is not handled by the library. Impact (as per provided metrics): CVSS v2 base 7.5 (HIGH) and CVSS v3.1 base 9.8 (CRITICAL) with network attack vector, no authentication, and partial/confident...

CVE-2015-1572

CVE-2015-1572 is a heap-based buffer overflow in closefs.c of the libext2fs library used by e2fsprogs, exploited when a crafted block group descriptor is marked dirty. Affected: e2fsprogs (libext2fs) prior to 1.42.12. Root cause: incomplete fix for CVE-2015-0247. Impact: local code execution poss...

CVE-2015-3451

CVE-2015-3451 affects XML::LibXML prior to 2.0119. The _clone function does not properly preserve or set the expand_entities option, enabling XML external entity (XXE) attacks via crafted XML data to the new or load_xml entry points. The connected sources confirm the vulnerable component and the ...

CVE-2016-0600

CVE-2016-0600 is an unspecified vulnerability in Oracle MySQL Server affecting InnoDB across multiple branches: MySQL 5.5.x (≤5.5.46), 5.6.x (≤5.6.27), 5.7.x (≤5.7.9) and MariaDB up to 5.5.46/47, plus 10.0.x ≤10.0.23 and 10.1.x ≤10.1.10. It allows remote authenticated users to cause a denial of s...

CVE-2016-0609

CVE-2016-0609 is an Oracle MySQL vulnerability affecting multiple branches (MySQL 5.5.46 and earlier; 5.6.27 and earlier; 5.7.9 and MariaDB before 5.5.47; 10.0.x before 10.0.23; 10.1.x before 10.1.10) where remote authenticated users can affect availability via unknown vectors related to privileg...

CVE-2016-1000341

CVE-2016-1000341 : The Bouncy Castle JCE Provider (BC-JCE) up to version 1.55 and earlier suffers a timing-side-channel in DSA signature generation. The lack of blinding can allow an observer to deduce the signature’s k value, potentially leaking the private key. The vulnerability is tied to the ...

CVE-2016-9939

CVE-2016-9939 affects Crypto++ (Crypto++/libcrypto++) 5.6.4, where the ASN.1 BER decoding routine allocates a memory block based on the length field and may zero the memory if contents are insufficient, causing a noticeable delay during the wipe for large allocations. This concrete detail is repe...

CVE-2017-12137

CVE-2017-12137 affects Xen hypervisor, with a local privilege escalation via map_grant_ref in arch/x86/mm.c that could let a local PV guest OS user gain host privileges. The linked documents confirm Xen is the vulnerable component and identify the underlying issue as a map_grant_ref related flaw....

CVE-2017-12186

CVE-2017-12186 affects xorg-x11-server prior to 1.19.5. The X-Resource extension lacked proper length validation, allowing a malicious X client to crash the X server or potentially execute arbitrary code. Multiple connected advisories corroborate this vulnerability in Xorg/Xserver suites and refe...

CVE-2017-12836

CVE-2017-12836 affects CVS 1.12.x when configured to use SSH for remote repositories. A remote attacker can supply a repository URL with a crafted hostname (for example, a string that triggers -oProxyCommand) to cause arbitrary code execution on the target. This is evidenced by cross-references i...

CVE-2017-13725

CVE-2017-13725 affects tcpdump, with a buffer over-read in IPv6 routing header parser (print-rt6.c:rt6_print) mitigated by upgrading to tcpdump 4.9.2. The vulnerability could enable information disclosure or trigger a crash due to memory handling weaknesses in the IPv6 routing header path. Remedi...

CVE-2017-15191

CVE-2017-15191 affects Wireshark 2.0.0–2.4.1 (including 2.2.0–2.2.9 and 2.4.0–2.4.1). The DMP dissector contains a length-check flaw in 7‑bit string handling that can cause an application crash when processing malformed packets, potentially enabling a denial of service. The issue has been fixed u...

CVE-2017-5121

CVE-2017-5121 concerns the Chromium/Google Chrome V8 component. Reports in the connected sources confirm an out-of-bounds memory access in V8 before version 61.0.3163.100, enabling a remote attacker to execute arbitrary code within the Chrome sandbox on Linux, Windows, and Mac via a crafted page....

CVE-2018-18337

The CVE-2018-18337 issue affects Chromium/Blink. A use-after-free vulnerability in Blink (Chromium’s rendering engine) was identified prior to version 71.0.3578.80, with attackers able to trigger heap corruption through a crafted HTML page. Upstream fixes address Blink use-after-free paths; affec...

CVE-2018-6040

CVE-2018-6040 : In Google Chrome, there was a CSP bypass due to insufficient policy enforcement in the Blink component. Version information in the provided docs indicates this affected Chrome prior to 64.0.3282.119 and was addressed by the 64.0.3282.119 update. The vulnerability could allow a cra...

CVE-2018-6042

CVE-2018-6042 is a Chrome/Omnibox vulnerability: an incorrect security UI in the Omnibox allowed a remote attacker to spoof the URL bar via a crafted HTML page in Chrome versions prior to 64.0.3282.119. The issue enables spoofing of the OmniBox UI, potentially misleading users about the page they...

CVE-2019-14370

Exiv2 0.27.99.0 contains an out-of-bounds read in MrwImage::readMetadata() (CVE-2019-14370) that could lead to denial of service. Connected sources confirm the issue but do not specify a fixed version in the provided materials; remediation/version details are not disclosed here. Monitor for updat...

CVE-2021-31873

CVE-2021-31873 affects klibc prior to 2.0.9. Additions in malloc() may cause an integer overflow and a subsequent heap buffer overflow, per multiple sources. Reported impacts include crashes and potential for denial of service, with some advisories noting possible arbitrary code execution in affe...

CVE-2021-38291

CVE-2021-38291 affects FFmpeg; the issue is an assertion failure in libavutil/mathematics.c triggered by certain inputs (commit de8e6e67e7523e48bb27ac224a0b446df05e1640). Public reports describe it as causing FFmpeg to abort in extreme cases (e.g., adpcm_ms with very high channel counts). Connect...

CVE-2021-45949

CVE-2021-45949 affects Ghostscript GhostPDL 9.50 through 9.54.0. The vulnerability is a heap-based buffer overflow in the function sampled_data_finish, which is called from sampled_data_continue and interp. This is the specific flaw described in the provided documents. The vulnerability is associ...

CVE-2022-1921

CVE-2022-1921 involves an Integer overflow in the GStreamer gst-avi-demux path (avidemux element), enabling a heap overwrite while parsing AVI files and potentially allowing arbitrary code execution. Publicly documented in multiple advisories (e.g., Debian DSA-5204, Mageia MGASA-2022-0322, AlmaLi...

CVE-2022-26357

CVE-2022-26357 is a race in Xen’s VT-d domain ID cleanup that can leak VT-d domain IDs and bypass housekeeping flushes. Reported across multiple Xen deployments (e.g., SUSE SLES/SLED, Gentoo advisories) with the issue rooted in mapping Xen domain IDs to a smaller value range and a race in the cle...

CVE-2022-29536

CVE-2022-29536 affects GNOME Epiphany before 41.4 and 42.x before 42.2. A buffer overflow in the UI process (ephy_string_shorten) can be triggered by a long page title because the UTF-8 ellipsis byte length is not properly accounted for. Impact per referenced advisories is memory corruption/crash...

CVE-2022-3534

CVE-2022-3534 affects the libbpf component (function btf_dump_name_dups in tools/lib/bpf/btf_dump.c) with a use-after-free in Linux kernel/libbpf. Debian and other sources report a patch and version bumps: Debian DLA fixes libbpf to 0.3-2+deb11u1 (and related packages), and ALT Linux notes a fix ...

CVE-2022-47950

OpenStack Swift contains a vulnerability (CVE-2022-47950) where a authenticated user can supply crafted XML to the S3 API, causing it to disclose arbitrary host files. Affected lines mention OpenStack Swift versions before 2.28.1, 2.29.x before 2.29.2, and 2.30.0, with impact on both s3api (Rocky...

CVE-2022-49063

The CVE (CVE-2022-49063) affects the Linux kernel in the ice driver’s ARFS feature, where use-after-free can occur when freeing @rx_cpu_rmap. The issue arises because free_irq_cpu_rmap() is invoked after (devm_)free_irq(), causing the code to operate on IRQ descriptors that may already be freed, ...

CVE-2023-1993

CVE-2023-1993 is a vulnerability in the Wireshark LISP dissector causing a denial-of-service via a crafted capture file or packet injection. A large loop in the LISP dissector leads to resource exhaustion when processing certain inputs. Affected Wireshark versions span 4.0.0–4.0.4 and 3.6.0–3.6.1...

CVE-2023-23009

CVE-2023-23009 affects Libreswan 4.9, enabling remote DoS via a crafted TS payload with an incorrect selector length, causing an assert failure and daemon restart. Connected advisories confirm multiple distributions (e.g., MiracleLinux, TencentOS Server, RHEL/CentOS/Oracle Linux families) referen...

CVE-2023-42883

CVE-2023-42883 involves WebKitGTK/WebKit-based components where processing an image can cause a denial-of-service due to an underlying memory handling issue. The vulnerability is addressed in Apple platforms (Safari 17.2, macOS Sonoma 14.2, iOS 17.2/iPadOS 17.2, watchOS 10.2, tvOS 17.2; with olde...

CVE-2024-27405

CVE-2024-27405 describes a Linux kernel issue in usb: gadget: ncm where the unwrap logic can drop all datagrams when a second NTB is faulty due to a leftover byte after a proper NTB. The trigger observed during tethering over NCM with Windows 11 host. Root cause: if there are leftover bytes, unwr...

CVE-2024-27416

CVE-2024-27416 affects the Linux kernel Bluetooth hci_event path, specifically HCI_EV_IO_CAPA_REQUEST handling when a remote feature read is still pending. Root cause: on receiving HCI_EV_IO_CAPA_REQUEST while HCI_OP_READ_REMOTE_EXT_FEATURES has not yet been responded to, the code incorrectly ass...

CVE-2024-35830

The CVE-2024-35830 issue concerns the Linux kernel media driver tc358743. Concrete details from connected advisories show the vulnerability arises when the v4l2 async device is registered before the device is fully set up. The fix is to register the v4l2 async device only after successful setup, ...

CVE-2024-35848

CVE-2024-35848 affects the Linux kernel: an eeprom at24 memory corruption race condition occurs when an nvmem device is registered if the eeprom is not accessible. The read can fail and the device may be torn down; if another driver accesses the torn-down nvmem device, it can reference invalid me...

CVE-2024-35849

CVE-2024-35849 affects the Linux kernel btrfs_ioctl_logical_to_ino path. The issue is an information leak: a struct btrfs_data_container allocated with kvmalloc() is copied back to user space without zero-filling, exposing uninitialized memory (Bytes 40-65535) to user-space. The root cause is lac...

CVE-2024-46812

CVE-2024-46812 concerns the Linux kernel DRM/AMD display code. The vulnerability arises from memory access issues addressed by skipping inactive planes in ModeSupportAndSystemConfiguration, as reported by Coverity. The fix is implemented in the kernel to prevent illegal accesses by not processing...

CVE-2025-37772

CVE-2025-37772 – Linux kernel RDMA CMA workqueue race condition. The vulnerability arises when multiple rapid calls to cma_netevent_callback() enqueue cma_netevent_work_handler() for the same rdma_cm_id, potentially overwriting a previously scheduled work item due to reusing the rdma_cm_id’s net_...

CVE-2025-37889

CVE-2025-37889 : In the Linux kernel’s ASoC code, platform_max was inconsistently interpreted as a control value versus a register value. The patching effort reverts a previous +min shift and updates all code paths to consistently treat platform_max as a control value (customer-facing representat...

CVE-2008-1887

Summary of CVE-2008-1887 : Python 2.5.2 and earlier are affected by a context-dependent vulnerability where a negative size value is passed to PyString_FromStringAndSize when assert() is disabled, causing under-allocation and a buffer overflow. Documented impact: remote attackers could execute ar...

CVE-2009-4537

CVE-2009-4537 concerns the Linux kernel before 2.6.32.3, specifically the r8169 Ethernet driver (drivers/net/r8169.c). The vulnerability arises from not properly checking the size of frames that exceed the MTU, allowing remote attackers to cause a denial of service via crafted packets that exploi...

CVE-2010-3442

Technical details for CVE-2010-3442 are not publicly provided in the connected documents. The sources reference the CVE and affected kernel versions but do not describe exploitability, impact specifics, or fixes. Monitor for vendor advisories and updates.

CVE-2012-2665

CVE-2012-2665 affects OpenOffice.org and LibreOffice prior to 3.5.5. The issue is a heap-based buffer overflow in the XML manifest encryption tag parsing when processing Open Document Text (.odt) files. An attacker could craft an ODT with (1) a child tag under an incorrect parent, (2) duplicate t...

CVE-2012-4188

CVE-2012-4188 is a heap-based buffer overflow in Mozilla Firefox’s Convolve3x3 path, affecting Firefox before 16.0 (and ESR 10.x before 10.0.8), Thunderbird before 16.0 (and ESR 10.x before 10.0.8), and SeaMonkey before 2.13. The vulnerability allows remote code execution via unspecified vectors;...

CVE-2013-2016

CVE-2013-2016 affects qemu v1.3.0 and later (virtio-rng). The issue arises from how addresses are validated when a guest accesses the config space of a virtio device; when the device has a very small or zero-sized config space, a privileged guest could access the host’s qemu address space and pot...

CVE-2013-4389

CVE-2013-4389 affecting Ruby on Rails Action Mailer 3.x (log_subscriber.rb) allows remote DoS via a crafted email address during log message construction. Connected advisories confirm the issue in rubygem-actionmailer-3.x/Action Mailer, with OpenSUSE noting a fix for the log_subscriber DoS vulner...

CVE-2014-0386

CVE-2014-0386 is an unspecified vulnerability in the MySQL Server component of Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier. The vulnerability can allow remote authenticated users to affect availability via unknown vectors related to the Optimizer. Connected sources...

CVE-2014-2421

CVE-2014-2421 is an unspecified vulnerability in the 2D component of Oracle Java SE (and related IBM SDK for Java builds) with a base impact of complete confidentiality, integrity, and availability. Connected IBM advisories confirm this CVE appears in multiple IBM products that bundle IBM SDK for...

CVE-2014-3611

CVE-2014-3611 corresponds to a race condition in the Linux kernel’s KVM PIT emulation: the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c, with affected versions up to and including 3.17.2. The vulnerability allows a guest OS user to trigger a host OS crash via incorrect PIT emulation. ...

CVE-2014-9644

CVE-2014-9644 affects the Linux kernel Crypto API prior to 3.18.5. It allows a local user to load arbitrary kernel modules by abusing a bind() call on an AF_ALG socket with a module template expression (eg, vfat(aes)) in salg_name. This is a local, privilege-related issue, separate from CVE-2013-...

CVE-2015-0382

CVE-2015-0382 is a remote-availability vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier, related to Server: Replication, separate from CVE-2015-0381. The connected advisories show multiple vendors/types referencing MySQL/MariaDB vulnerabilities with potential DoS or ...