CVE-2015-8683

The set of connected documents confirms multiple LibTIFF vulnerabilities, notably CVE-2015-8683 (out-of-bounds read in putcontig8bitCIELab) among many others (CVE-2014-8127, CVE-2014-8130, CVE-2015-8665, CVE-2015-8668, etc.). Affected component is LibTIFF (primarily 4.0.x) with various tools (tif...

CVE-2016-2385

CVE-2016-2385 describes a heap-based buffer overflow in Kamailio’s SEAS module (encode_msg.c) that can be triggered by oversized SIP packets, potentially leading to memory corruption, a process crash, or remote code execution. The vulnerability affects Kamailio versions prior to 4.3.5; the Fixed ...

CVE-2016-8683

GraphicsMagick 1.3.25 and earlier is affected by CVE-2016-8683 due to a vulnerability in ReadPCXImage (coders/pcx.c). Remote attackers can trigger a memory allocation failure in the PCX coder, potentially leading to denial of service. Documented in multiple advisories (e.g., Mageia MGASA-2017-022...

CVE-2016-9103

CVE-2016-9103 affects QEMU’s 9pfs/v9fs_xattrcreate in hw/9pfs/9p.c. The vulnerability allows local authenticated guests to obtain sensitive host heap memory information by reading xattribute values before writing to them. Technical context and host-memory disclosure are supported by connected sou...

CVE-2016-9602

CVE-2016-9602 is tied to QEMU (qemu-kvm) built with VirtFS where, before version 2.9, a privileged guest user can trigger an improper link following to access the host filesystem outside the shared folder, potentially escalating privileges on the host. The connected EulerOS advisory confirms this...

CVE-2017-11359

CVE-2017-11359 affects SoX 14.4.2: the wavwritehdr function in wav.c can be triggered by a crafted snd file to cause a denial of service (divide-by-zero error and application crash) during WAV conversion. Public advisories note fixes/updates (e.g., Debian 14.4.1-5+deb8u3; DLA 1705-1; Alpine pages...

CVE-2017-11406

Wireshark DOCSIS dissector (versions 2.2.0–2.2.7 and 2.0.0–2.0.13) is vulnerable to an infinite loop triggered by crafted frames due to invalid Frame Control values. This can cause a DoS. The issue was addressed by rejecting invalid Frame Control parameter values in plugins/docsis/packet-docsis.c...

CVE-2017-14733

CVE-2017-14733 affects GraphicsMagick 1.3.26 where ReadRLEImage in coders/rle.c mishandles RLE headers that specify too few colors, enabling a heap-based buffer over-read and a denial of service via a crafted image. Connected advisories indicate the issue was addressed in later GraphicsMagick rel...

CVE-2017-2624

CVE-2017-2624 affects the X.Org X server (xorg-x11-server) before 1.19.0. The vulnerability arises from using memcmp() to compare the received MIT cookie against a series of valid cookies; since many memcmp() implementations stop at the first differing byte, an observable timing差 can leak informa...

CVE-2017-2836

CVE-2017-2836 : FreeRDP contains an exploitable denial-of-service in the handling of proprietary server certificates. A specially crafted challenge packet can cause the program to terminate, resulting in a DoS condition. Affected component: FreeRDP 2.0.0-beta1+android11 (reading of server certifi...

CVE-2017-5040

CVE-2017-5040 affects Chromium/Chromium-based browsers. The issue is an information disclosure in the V8 JavaScript engine caused by a missing neutering check, enabling a remote attacker to read memory values via a crafted HTML page. The vulnerability is in the V8 component of Chromium before ver...

CVE-2018-0503

CVE-2018-0503 affects MediaWiki releases prior to 1.31.1 (also noted for 1.30.1, 1.29.3 and 1.27.5). Root cause: the $wgRateLimits entry for 'user' incorrectly overrides the 'newbie' limit, enabling a remote authenticated user to bypass access restrictions. Impact: possible bypass of site-imposed...

CVE-2018-10982

CVE-2018-10982 affects the Xen hypervisor (through 4.10.x) where x86 HVM guests can cause a denial of service or potentially gain hypervisor privileges by setting up an HPET timer to deliver interrupts in IO-APIC mode (vHPET interrupt injection). Affected component: Xen hypervisor (x86 HVM path) ...

CVE-2018-6060

CVE-2018-6060 describes a use-after-free in Chrome/Chromium’s Blink/WebKit (WebAudio) prior to version 65.0.3325.146. The issue allows a remote attacker to potentially cause heap corruption via a crafted HTML page. The Debian advisories and Chromium security updates indicate fixes in Chromium/Chr...

CVE-2018-6152

CVE-2018-6152 is a Chrome/Chromium developer tools vulnerability where the Page.downloadBehavior backend could cause downloaded files to be treated as safe, enabling a crafted HTML page and user interaction to potentially escape the sandbox. Connected sources indicate this issue affected Chromium...

CVE-2018-6174

CVE-2018-6174 : An integer overflow in the SwiftShader library used by Google Chrome/Chromium prior to 68.0.3440.75 allows remote code execution via a crafted HTML page. Public notes across connected sources confirm the issue in Chromium/Chrome’s SwiftShader component, with Debian/DSA and Gentoo ...

CVE-2018-7557

CVE-2018-7557 affects FFmpeg (libavcodec/utvideodec.c: decode_init) in FFmpeg versions 2.8 through 3.4.2. A crafted AVI file with specific chroma subsampling dimensions can trigger a denial of service via an out-of-bounds/out-of-array read. Connected sources confirm the component and root cause b...

CVE-2019-18976

CVE-2019-18976 affects Sangoma Asterisk and Certified Asterisk up to 13.x; a NULL pointer dereference and crash can occur when receiving a re-invite that initiates T.38 faxing if the SDP has a port of 0 and no c-line. Public details confirm the affected file is res_pjsip_t38.c and the issue is a ...

CVE-2020-12460

OpenDMARC (affected: 1.3.2 and 1.4.x up to 1.4.0-Beta1) is vulnerable to an improper null termination in opendmarc_xml_parse, causing a one-byte heap overflow and remote memory corruption when parsing crafted DMARC aggregate reports. Affected components/file: opendmarc_xml_parse in OpenDMARC. Roo...

CVE-2020-12626

Roundcube Webmail (Roundcube Webmail) CVE-2020-12626 is a CSRF vulnerability where an attacker can cause an authenticated user to be logged out by abusing POST requests. The issue arises from incorrect handling of login/logout POSTs and is documented across multiple connected sources, including D...

CVE-2020-21534

Summary (CVE-2020-21534) fig2dev 3.2.7b contains a global buffer overflow in the get_line function (read.c). The vulnerability is discussed in multiple advisories across Linux distros (Ubuntu, Debian, openSUSE/openSUSE-SU-2021:1481-1, SUSE/openSUSE patches). Affected component is the fig2dev util...

CVE-2020-36244

CVE-2020-36244 affects the GENIVI diagnostic log and trace (DLT) daemon, dlt-daemon, with a heap-based buffer overflow in versions prior to 2.18.6 that could enable remote code execution. The issue, assigned to DLT-Daemon, is documented across multiple feeds (NVD/NASL/OSV/Debian LTS) and is refle...

CVE-2020-8003

CVE-2020-8003 applies to virglrenderer, specifically a double-free in vrend_renderer.c that can cause a denial of service when a texture allocation fails. The root cause is that vrend_renderer_resource_allocated_texture is not an appropriate place for a free. Public documentation in the connected...

CVE-2021-21375

CVE-2021-21375 affects the pjproject/PJSIP library (versions 2.10 and earlier). The issue arises after an initial INVITE when two 183 responses are received and the first triggers negotiation failure, causing a crash and a denial of service. Mitigation: upgrade to patched pjproject/PJSIP (per GLS...

CVE-2021-27347

CVE-2021-27347 affects lrzip 0.631 (Irzip) with a use-after-free in lzma_decompress_buf in stream.c, enabling DoS via a crafted compressed file. Debian and Ubuntu advisories indicate fixed packages: oldstable (buster) 0.631+git180528-1+deb10u1; stable (bullseye) 0.641-1+deb11u1. Other related CVE...

CVE-2021-30157

MediaWiki CVE-2021-30157 affects the core web UI: on ChangesList pages (Special:RecentChanges, Special:Watchlist) rcfilters-filter-* labels were emitted as unescaped HTML, enabling cross-site scripting. Affected versions are MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. The is...

CVE-2021-3563

CVE-2021-3563 affects OpenStack Keystone. The issue stems from keystone only validating the first 72 characters of an application secret, enabling bypass of some password complexity checks and affecting confidentiality and integrity. The vulnerability is listed across multiple advisories (e.g., D...

CVE-2021-43845

CVE-2021-43845 affects the PJPROJECT/JAMI stack used by PJMEDIA. In version 2.11.1 and earlier, processing of incoming RTCP XR messages with a block may not validate the data field against the packet size, potentially enabling out-of-bounds reads. Debian/DSA/DLA entries note fixes in ring (embedd...

CVE-2022-1924

CVE-2022-1924 describes a DOS/heap-overwrite risk in the gstreamer good plugins’ MKV demuxer when using LZO decompression. The root cause is an integer overflow in the matroskademux element’s LZO decompression path, which can lead to a segfault or a heap overwrite depending on the libc/OS behavio...

CVE-2022-31086

CVE-2022-31086 affects LDAP Account Manager (LAM). In versions prior to 8.0, an incorrect regular expression allows uploading PHP scripts to the /config/templates/pdf directory, which could enable Remote Code Execution if that directory is accessible. This is not a default configuration of LAM. T...

CVE-2023-2952

Wireshark CVE-2023-2952: XRA dissector infinite loop allowing denial of service via crafted capture files or packet injection. Affected versions: Wireshark 4.0.0–4.0.5 and 3.6.0–3.6.13. Mitigation: upgrade to Wireshark 4.0.6 or newer (fixed in multiple advisories; e.g., Debian/AlmaLinux). Exploit...

CVE-2023-52642

CVE-2023-52642 concerns a Linux kernel issue in the media: rc subsystem where attaching/detaching BPF programs could require write permission, with an auxiliary CAP_NET_ADMIN requirement. The main impact described across multiple advisories is a locally exploitable condition in kernel space that ...

CVE-2025-37970

CVE-2025-37970 affects the Linux kernel IIO imu driver st_lsm6dsx_read_fifo. The root cause is a possible infinite loop when pattern_len is zero and the device FIFO is not empty, leading to a local lockup and availability impact. The vulnerability is addressed by a fix in the kernel (as described...

CVE-2025-38239

CVE-2025-38239 affects the Linux kernel megaraid_sas driver. On systems with DRAM interleave enabled, an out-of-bounds access can occur due to an invalid node index in megasas_alloc_irq_vectors during megaraid_sas probing, which triggers UBSAN reports (array-index-out-of-bounds in topology.h: ind...

CVE-2007-6206

CVE-2007-6206 affects the Linux kernel (2.4.x and 2.6.x up to 2.6.24-rc3). The issue lies in the do_coredump function in fs/exec.c, where the core dump file’s UID is not changed if a core dump already exists in the same location when a root-owned process dumps a core. This behavior could allow a ...

CVE-2008-4796

The CVE-2008-4796 issue concerns the _httpsrequest function in Snoopy (Snoopy.class.php) of Snoopy 1.2.3 and earlier, used by Nagios Core and related products (e.g., Nagios-related components referenced in connected records). The vulnerability allows remote attackers to execute arbitrary commands...

CVE-2010-3310

CVE-2010-3310 refers to multiple signedness errors in net/rose/af_rose.c of the Linux kernel, fixed before 2.6.36-rc5-next-20100923. The vulnerability allows local users to induce a denial of service (heap memory corruption) or possibly cause other unspecified impacts through a rose_getname call ...

CVE-2013-4327

CVE-2013-4327 describes a Polkit race condition used when systemd communicates with a polkit authority via D-Bus, enabling local users to bypass access restrictions using a PolkitUnixProcess PolkitSubject race with (1) setuid processes or (2) pkexec. Connected advisories (GLSA-201406-27, related ...

CVE-2013-7439

CVE-2013-7439 affects X.Org libX11 and the X11R6.x include/X11/Xlibint.h, where multiple off-by-one errors in the MakeBigReq and SetReqLen macros can allow a remote attacker to trigger a buffer overflow. The vulnerability exists in libX11 prior to version 1.6.0. Impact as stated: unspecified in d...

CVE-2014-1705

CVE-2014-1705 affects Google Chrome’s V8 engine. Chrome versions before 33.0.1750.152 (OS X/Linux) and 33.0.1750.154 (Windows) are affected by a memory corruption bug in V8 that could be exploited remotely to cause a denial of service or other impacts. Public documentation in the provided sources...

CVE-2014-3686

CVE-2014-3686 affects wpa_supplicant and hostapd (versions 0.7.2–2.2) where using wpa_cli or hostapd_cli with action scripts can lead to remote arbitrary command execution via a crafted frame. Root cause involves unsanitized input passed to a system() call from action scripts, enabling command in...

CVE-2015-0837

CVE-2015-0837 affects Libgcrypt (before 1.6.3) and GnuPG (before 1.4.19). It enables a timing side-channel attack on modular exponentiation using a pre-computed table, related to a Last-Level Cache side-channel attack. The description notes the timing differences that could allow an attacker to o...

CVE-2015-1821

CVE-2015-1821 affects the chrony project (chronyd/chronyc). The issue is an out-of-bounds write flaw in how chrony stores certain addresses when configuring NTP or cmdmon access, triggered by a subnet size not divisible by four and an address with a nonzero bit in the subnet remainder. This can a...

CVE-2015-8560

CVE-2015-8560 describes an incomplete blacklist vulnerability in foomatic-rip (util.c) used by cups-filters 1.0.42 and in foomatic-filters (Foomatic 4.0.x). The issue allows remote attackers to execute arbitrary commands by injecting a ; (semicolon) in a print job. Root cause is failure to fully ...

CVE-2016-1688

CVE-2016-1688 is an out-of-bounds read in the V8 JavaScript library used by Google Chrome/Chromium prior to 51.0.2704.63. The root cause involves mishandling external string sizes, enabling a remote attacker to trigger a denial of service via crafted JavaScript. Remediation: upgrade to Chrome/Chr...

CVE-2016-8577

CVE-2016-8577 entry is rejected/not used; duplicates CVE-2020-2891 (CVE-2020-25707).

CVE-2016-8692

CVE-2016-8692 - JasPer before 1.900.4 is vulnerable to a denial of service via a crafted BMP image. The issue is a divide-by-zero error in jpc_dec_process_siz exploited when a malicious YRsiz value is processed by the imginfo command, leading to application crash. Affected component: JasPer JPEG ...

CVE-2016-9101

CVE-2016-9101 affects QEMU’s i8255x (PRO100) NIC emulation in hw/net/eepro100.c. A memory leak can be triggered by repeatedly unplugging the NIC, causing memory consumption and QEMU process crash (DoS) from a local privileged user. Public advisories (Debian, SUSE, IBM PowerKVM) confirm the issue ...

CVE-2016-9453

CVE-2016-9453 affects the LibTIFF library. The vulnerability is in the t2p_readwrite_pdf_image_tile function, which allows a remote attacker to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code by processing a JPEG file with a TIFFTAG_JPEGTABLES of lengt...

CVE-2017-14314

GraphicsMagick 1.3.26 is affected by CVE-2017-14314 due to an off-by-one error in DrawImage (magick/render.c) that can trigger a heap-based buffer over-read, enabling remote denial of service via a crafted image. Public advisories (Debian DSA-4321-1, USN-4232-1) confirm this family of issues and ...