CVE-2017-11591

CVE-2017-11591 is described as a Floating point exception in Exiv2::ValueType in Exiv2 0.26 that can cause a remote denial of service via crafted input. The connected documents corroborate the issue across distributions (e.g., Astra Linux, Ubuntu USN-3852-1, Debian DLA-3265) and list Exiv2 as the...

CVE-2017-13775

Technical details about CVE-2017-13775 are not publicly provided in the connected documents. The initial description notes a DoS in GraphicsMagick ReadJNXImage(), but no product/version specifics or remediation are included here. Monitor for updates.

CVE-2017-14223

Technical details about CVE-2017-14223 are not provided in the connected documents. The initial description outlines a DoS in FFmpeg’s asfdec_f.c but no vendor/product/version specifics are given here. Monitor for updates.

CVE-2017-17501

Technical details about CVE-2017-17501 are not provided in the connected documents. Monitor for updates.

CVE-2017-17912

CVE-2017-17912 affects GraphicsMagick (TIFF reader). The issue is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, where LocaleNCompare reads data beyond the allocated region, exposing potential denial of service or information disclosure as noted in multiple advisories. Connect...

CVE-2017-3329

CVE-2017-3329 affects Oracle MySQL Server (Server: Thread Pooling). Affected versions are 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The issue allows an unauthenticated attacker with network access via multiple protocols to cause the MySQL Server to hang or crash (complete Do...

CVE-2017-5525

CVE-2017-5525 refers to a memory leak in hw/audio/ac97.c in QEMU (Quick Emulator). The vulnerability allows local privileged users on the guest to trigger a denial of service by unplugging a large number of devices, causing host memory consumption and QEMU process crashes. Public details consiste...

CVE-2017-5847

CVE-2017-5847 affects the GStreamer gst-plugins-ugly package, specifically the asfdemux element (gst_asf_demux_process_ext_content_desc in gst/asfdemux/gstasfdemux.c). The vulnerability allows a remote attacker to trigger a denial of service via an out-of-bounds heap read when processing extended...

CVE-2017-5991

MuPDF vulnerability CVE-2017-5991 is a NULL pointer dereference in pdf_run_xobject (pdf-op-run.c) during Fitz fz_paint_pixmap_with_mask, affecting MuPDF up to the 1912de5f… commit. The issue is exploitable via parsing crafted PDFs and affects versions prior to 1.12+? (per the note “Versions 1.11 ...

CVE-2018-10841

GlusterFS on server nodes is vulnerable to privilege escalation via an authenticated TLS client that uses gluster CLI --remote-host to add itself to the trusted storage pool and perform privileged operations (e.g., managing volumes). The description specifies the root cause as a trust-pool escala...

CVE-2018-10871

CVE-2018-10871 affects 389-ds-base prior to versions 1.3.8.5 and 1.4.0.12. When Replica and/or retroChangeLog plugins are enabled, the service stores passwords in plaintext in changelog files. An attacker with high privileges (e.g., root or Directory Manager) can read these files to obtain plaint...

CVE-2018-20196

CVE-2018-20196 affects FAAD2 (Freeware Advanced Audio Decoder) 2.8.8, with a stack-based buffer overflow in the third instance of calculate_gain (libfaad/sbr_hfadj.c) caused by mishandling the S_M array. The vulnerability could lead to denial of service or other unspecified impact. Public advisor...

CVE-2018-6032

CVE-2018-6032 affects Blink in Google Chrome (pre-64.0.3282.119). The vulnerability stems from insufficient policy enforcement, enabling a remote attacker to potentially bypass same-origin policy and leak cross-origin data via a crafted HTML page (Shared Worker context cited by Debian/RHSA/Gentoo...

CVE-2018-6054

Chromium-based Google Chrome WebUI vulnerability CVE-2018-6054 is a use-after-free in WebUI prior to 64.0.3282.119 that could enable remote heap corruption via crafted Chrome Extensions. Affected product: Google Chrome (Windows, macOS, Linux) with WebUI component; root cause: use-after-free in We...

CVE-2018-6079

CVE-2018-6079 describes an information disclosure in WebGL within Google Chrome versions prior to 65.0.3325.146, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Google Chrome (WebGL implementation in Chrome’s rendering engine). The root cause is ...

CVE-2018-6104

CVE-2018-6104 affects Google Chrome/Chromium where the URL Formatter mishandled confusable characters (IDN homographs), enabling domain spoofing. The issue lies in the URL formatting component and could allow a remote attacker to lure users to a spoofed domain. Vulnerable versions are Chrome/Chro...

CVE-2018-6192

MuPDF (Artifex) 1.12.0 is vulnerable to CVE-2018-6192 via pdf_read_new_xref in pdf/pdf-xref.c, which can allow a remote attacker to crash the application (denial of service) with a crafted PDF. Several advisories (Arch, Debian, Gentoo) describe additional related issues in MuPDF around the same p...

CVE-2018-8019

CVE-2018-8019 affects OCSP handling in Apache Tomcat Native. Affects Tomcat Native versions 1.2.0–1.2.16 and 1.1.23–1.1.34 where invalid OCSP responses could cause revoked client certificates to be accepted during mutual TLS authentication. Public details indicate vulnerability in OCSP response p...

CVE-2019-13451

CVE-2019-13451 affects Xymon up to version 4.3.28, with a buffer overflow in history.c identified as the root cause. The issue is documented across multiple feeds (NVD, CNVD, OSV, osv.dev, Debian/Ubuntu trackers) and is characterized by exposure via a network vector with high impact on confidenti...

CVE-2020-21597

CVE-2020-21597 affects the libde265 library. The provided documents describe a heap buffer overflow in the mc_chroma function of libde265 v1.0.4, exploitable via a crafted file. In practice, this can trigger a crash or DoS via malicious media files. Public advisories (Debian DSA-5346-1, Debian LT...

CVE-2020-24660

CVE-2020-24660 affects LemonLDAP::NG (up to 2.0.8) when used with NGINX, and the Lemonldap::NG handler for Node.js (before 0.5.2). The issue allows an attacker to bypass URL-based access control on protected Virtual Hosts by submitting a non-normalized URI. The vulnerability can impact systems th...

CVE-2021-32765

CVE-2021-32765 affects hiredis, a Redis C client. The issue is an integer overflow during parsing RESP multi-bulk replies: count * sizeof(redisReply*) may overflow SIZE_MAX, causing a short allocation and potential buffer overflow. Exploitation details are not provided in the documents, but multi...

CVE-2021-39923

CVE-2021-39923 affects Wireshark PNRP dissector: a large loop in the PNRP dissector logic in Wireshark 3.4.0–3.4.9 and 3.2.0–3.2.17 can allow a denial-of-service via specially crafted captures or packet injection, causing the application to halt or crash. Affected product: Wireshark; vulnerable c...

CVE-2021-43804

CVE-2021-43804 affects the PJPROJECT/PJSIP stack, specifically PJMEDIA/RTCP. The flaw arises when an incoming RTCP BYE message declares a reason length that isn’t checked against the actual packet size, enabling an out-of-bounds read. The documents consistently describe this as the root cause and...

CVE-2022-2122

CVE-2022-2122 affects GStreamer gst-plugins-good demuxing in qtdemux, where an overflow/heap overwrite can occur during zlib decompression in qtdemux_inflate, potentially causing a segfault or heap overwrite depending on libc/OS. Affected component: gstreamer gst-plugins-good (mkv/avi demuxers us...

CVE-2022-23096

ConnMan (DNS proxy) up to version 1.40 contains CVE-2022-23096: TCP server reply path lacks sufficient Header Data checks, enabling out-of-bounds reads. This could lead to denial of service or arbitrary code execution depending on the advisory. >= ConnMan 1.42 (or latest security-patched build...

CVE-2022-23479

CVE-2022-23479 affects xrdp prior to version 0.9.21. A buffer overflow in the function xrdp_mm_chan_data_in() is reported. The available connected sources consistently describe the issue as a pre-0.9.21 vulnerability with no known workarounds and advise upgrading to a fixed release. Debian securi...

CVE-2022-28044

lrzip contains a heap memory corruption in lrzip.c:initialise_control (CVE-2022-28044). The vulnerability affects lrzip memory handling and pointer/memory allocation logic, with Debian and Ubuntu advisories noting potential denial of service and, in some contexts, arbitrary code execution. Public...

CVE-2022-37616

CVE-2022-37616: The xmldom package (@xmldom/xmldom) for Node.js contains a prototype pollution flaw in dom.js: the copy function can pollute Object.prototype via the p variable, affecting all versions prior to 0.8.3. This vulnerability is rated with CVSS 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (b...

CVE-2022-43242

Libde265 v1.0.8 contains a heap-buffer-overflow in mc_luma (motion.cc), enabling DoS via a crafted video file (CVE-2022-43242). Affects libde265 (H.265 codec). Remediation: upgrade to libde265 1.0.11 or newer (per Debian/Ubuntu Gentoo advisories and related disclosures).

CVE-2024-26788

CVE-2024-26788 affects Linux kernel’s dmaengine: fsl-qdma. The concrete issue is that qDMA IRQs could be enabled before registers were configured, allowing pending interrupts from the primary kernel to reach the irq handler prematurely and cause a panic. The connected Astra Linux advisory confirm...

CVE-2024-46953

CVE-2024-46953 concerns Ghostscript before 10.04.0, where an integer overflow while parsing the output filename format string in base/gsdevice.c can cause path truncation, enabling path traversal and potential code execution. Affected: Ghostscript PS/PDF interpreter, notably ghostpdl-10.04.0 and ...

CVE-2024-49369

CVE-2024-49369 affects Icinga2 TLS certificate validation from version 2.4.0, enabling impersonation of trusted cluster nodes or API users using client certificates. Fixed in Icinga 2.14.3, 2.13.10, 2.12.11, and 2.11.12. The connected Nessus/ALPINE entries confirm the vulnerability and the fix ve...

CVE-2025-37917

The CVE-2025-37917 issue is in the Linux kernel MTK Star EMAC driver (mtk_star_emac). It describes spinlock recursion that can occur when DMA interrupts are re-enabled during rx/tx polling. The documented fix replaces spin_lock/spin_unlock with spin_lock_irqsave/spin_unlock_irqrestore in mtk_star...

CVE-2026-25506

CVE-2026-25506 affects MUNGE: from version 0.5 up to 0.5.17, a local attacker can trigger a buffer overflow in munged to leak cryptographic key material from process memory, enabling forging of arbitrary MUNGE credentials and impersonation of users (including root) on services relying on MUNGE fo...

CVE-2005-4890

The CVE-2005-4890 entry describes a local vulnerability where tty hijacking is possible in shadow 4.x (before 4.1.5) and sudo 1.x (before 1.7.4) via the command path "su - user -c program". Attacker can use the TIOCSTI ioctl to inject characters into the input buffer, allowing the user session to...

CVE-2010-2226

CVE-2010-2226 affects the Linux kernel: the xfs_swapext function in fs/xfs/xfs_dfrag.c does not properly validate file descriptors passed to the SWAPEXT ioctl, enabling a local user with write access to swap a file into another and gain read access. The issue is present in kernel versions before ...

CVE-2012-3425

CVE-2012-3425 affects libpng via the png_push_read_zTXt function in pngpread.c. The vulnerability exists in libpng 1.0.x before 1.0.58, 1.2.x before 1.2.48, 1.4.x before 1.4.10, and 1.5.x before 1.5.10, enabling a remote attacker to cause a denial of service (out-of-bounds read) by sending a PNG ...

CVE-2015-1274

CVE-2015-1274 affects Google Chrome/Chromium prior to 44.0.2403.89, where the auto-open list could still execute certain file types immediately after download. Root causes are described in download_commands.cc and download_prefs.cc. The vulnerability could allow remote attackers to run arbitrary ...

CVE-2015-2737

CVE-2015-2737 affects Mozilla Firefox before 39.0 (and ESR 31.x before 31.8, 38.x before 38.1) and Thunderbird before 38.1. It targets rx::d3d11::SetBufferData, which reads data from uninitialized memory locations. The description notes the impact and attack vectors are unspecified; no explicit f...

CVE-2015-5177

CVE-2015-5177 describes a double-free vulnerability in OpenSLP 1.2.1 where the SLPDProcessMessage() routine can be triggered by a crafted package, leading to remote denial of service (crash). Multiple sources corroborate a remote-exploitation vector via OpenSLP, with affected products including O...

CVE-2015-5260

SPICE vulnerability CVE-2015-5260 is a heap-based buffer overflow in SPICE prior to 0.12.6 caused by improper bounds handling of certain QXL commands related to the surface_id parameter. A local attacker could cause a denial of service (heap corruption and QEMU-KVM crash) or possibly execute code...

CVE-2016-8683

GraphicsMagick 1.3.25 and earlier is affected by CVE-2016-8683 due to a vulnerability in ReadPCXImage (coders/pcx.c). Remote attackers can trigger a memory allocation failure in the PCX coder, potentially leading to denial of service. Documented in multiple advisories (e.g., Mageia MGASA-2017-022...

CVE-2016-9103

CVE-2016-9103 affects QEMU’s 9pfs/v9fs_xattrcreate in hw/9pfs/9p.c. The vulnerability allows local authenticated guests to obtain sensitive host heap memory information by reading xattribute values before writing to them. Technical context and host-memory disclosure are supported by connected sou...

CVE-2016-9602

CVE-2016-9602 is tied to QEMU (qemu-kvm) built with VirtFS where, before version 2.9, a privileged guest user can trigger an improper link following to access the host filesystem outside the shared folder, potentially escalating privileges on the host. The connected EulerOS advisory confirms this...

CVE-2017-11359

CVE-2017-11359 affects SoX 14.4.2: the wavwritehdr function in wav.c can be triggered by a crafted snd file to cause a denial of service (divide-by-zero error and application crash) during WAV conversion. Public advisories note fixes/updates (e.g., Debian 14.4.1-5+deb8u3; DLA 1705-1; Alpine pages...

CVE-2017-11406

Wireshark DOCSIS dissector (versions 2.2.0–2.2.7 and 2.0.0–2.0.13) is vulnerable to an infinite loop triggered by crafted frames due to invalid Frame Control values. This can cause a DoS. The issue was addressed by rejecting invalid Frame Control parameter values in plugins/docsis/packet-docsis.c...

CVE-2017-12135

CVE-2017-12135 concerns the Xen hypervisor grant-table handling. The connected materials show that the vulnerability involves transitive grants and a path through grant-copy handling. The core issue is in the GNTTABOP_copy path, where the fix for CVE-2017-12135 could cause the caller to receive a...

CVE-2017-14733

CVE-2017-14733 affects GraphicsMagick 1.3.26 where ReadRLEImage in coders/rle.c mishandles RLE headers that specify too few colors, enabling a heap-based buffer over-read and a denial of service via a crafted image. Connected advisories indicate the issue was addressed in later GraphicsMagick rel...

CVE-2017-2624

CVE-2017-2624 affects the X.Org X server (xorg-x11-server) before 1.19.0. The vulnerability arises from using memcmp() to compare the received MIT cookie against a series of valid cookies; since many memcmp() implementations stop at the first differing byte, an observable timing差 can leak informa...