CVE-2006-2935

CVE-2006-2935 affects the Linux kernel starting with 2.2.16 and later, where the dvd_read_bca function in the DVD handling code (drivers/cdrom/cdrom.c) assigns the wrong value to a length variable, enabling a local user to trigger a buffer overflow via a crafted USB Storage device and execute arb...

CVE-2009-0269

CVE-2009-0269 refers to a local kernel vulnerability in the Linux kernel’s eCryptfs inode handling. The flaw, described as a readlink error path in fs/ecryptfs/inode.c, can lead to denial of service (fault or memory corruption) and possibly other unspecified effects by causing the code to use a -...

CVE-2009-1270

CVE-2009-1270 affects ClamAV prior to 0.95. The issue is in libclamav/untar.c where a crafted TAR file can cause an infinite loop, leading to a denial of service by hanging clamd and clamscan. Public documentation in connected sources confirms the vulnerable component and its impact, with remedia...

CVE-2009-3553

CVE-2009-3553 is a use-after-free vulnerability in CUPS’ cupsdDoSelect path (scheduler/select.c) affecting the CUPS daemon when listing many print jobs. The issue arises from improper reference-count maintenance, allowing a remote attacker to trigger a denial of service (daemon crash or hang) via...

CVE-2012-3197

CVE-2012-3197 is an unspecified vulnerability in the MySQL Server component affecting Oracle MySQL versions 5.1.64 and earlier and 5.5.26 and earlier. The issue is described as allowing remote authenticated users to affect availability via unknown vectors related to Server Replication. Connected ...

CVE-2013-0339

CVE-2013-0339 affects libxml2 up to version 2.9.1 and is an XML External Entity (XXE) issue. The root cause is improper handling of external entities expansion unless an application developer uses xmlSAX2ResolveEntity or xmlSetExternalEntityLoader. Impact cited includes potential denial of servic...

CVE-2014-3534

CVE-2014-3534 (Linux kernel, s390) : The vulnerability in arch/s390/kernel/ ptrace.c allows a local user to bypass restrictions on address-space control with PTRACE_POKEUSR_AREA, gaining read/write access to kernel memory and potentially elevation of privileges via a crafted ptrace call. Affected...

CVE-2014-8098

Affected software: X.Org X Window System (X.Org Server), GLX extension in X.Org X server prior to version 1.16.3. Root cause: several functions exposed via the GLX and other X11 core protocol paths accept crafted length or index values, enabling out-of-bounds read/write that could crash the serve...

CVE-2016-0610

CVE-2016-0610 affects Oracle MySQL <=5.6.27 and MariaDB <=10.0.22 / 10.1.x

CVE-2016-1629

Google Chrome before 48.0.2564.116 is affected by CVE-2016-1629, a vulnerability in the Blink/Same Origin Policy and sandbox where a remote attacker could bypass SOP and escape the sandbox via unspecified vectors. The issue is mitigated by upgrading to Chrome 48.0.2564.116 or later (as reflected ...

CVE-2016-1691

CVE-2016-1691 affects the Skia library used by Google Chrome prior to 51.0.2704.63. The issue arises from mishandling of coincidence runs in SkOpCoincidence.cpp and SkPathOpsCommon.cpp, enabling a remote attacker to trigger a heap-based buffer overflow and cause a denial of service (with possible...

CVE-2016-6130

CVE-2016-6130 is a race condition in the Linux kernel's sclp_ctl_ioctl_sccb path (drivers/s390/char/sclp_ctl.c) prior to 4.6 that can allow local users to disclose kernel memory by altering a length field (double fetch). The vulnerability is described as a local information-disclosure due to memo...

CVE-2016-9560

CVE-2016-9560 describes a stack-based buffer overflow in the JasPer JPEG-2000 library. The overflow occurs in the function jpc_tsfb_getbands2 inside jpc_tsfb.c and affects JasPer before version 1.900.30 . An attacker could trigger the overflow by supplying a crafted image, with the impact describ...

CVE-2017-12136

CVE-2017-12136 affects Xen 4.6.x–4.9.x. The issue is a race condition in grant table maptrack free list handling, enabling a malicious guest administrator to crash the host or escalate privileges to the host. Public advisories (GLSA 201801-14; SUSE SU-2017:2327-2) document the fix as Xen upgrades...

CVE-2017-12937

CVE-2017-12937 affects GraphicsMagick 1.3.26, where the ReadSUNImage function in coders/sun.c can trigger a heap-based buffer over-read. Debi an/Ubuntu/Fedora advisories (and USN/DLA notes) confirm heap-based issues in GraphicsMagick with potential denial of service or memory disclosure. The Debi...

CVE-2017-18233

Exempi before 2.4.4 is affected by CVE-2017-18233: an integer overflow in XMPFiles/source/FormatSupport/RIFF.cpp (Chunk class) allows a crafted XMP payload in a .avi file to trigger a denial of service (infinite loop). The description in the initial document confirms the vulnerability in Exempi u...

CVE-2017-5043

CVE-2017-5043 : Affected software is Chromium/Chrome Apps in Google Chrome prior to 57.0.2987.98. The root cause is a use-after-free in GuestView, leading to a remote memory read (out-of-bounds) via a crafted extension. Public advisories indicate fixes in Chromium/Chrome updates; Debian and openS...

CVE-2017-5111

CVE-2017-5111 is a use-after-free vulnerability in the PDFium component of Chromium/Google Chrome prior to 61.0.3163.79. It allows remote memory corruption via a crafted PDF file. Connected advisories confirm the issue affects Chromium/Chromium-derived packages and that the fix was introduced in ...

CVE-2017-9468

Irssi vulnerability CVE-2017-9468 affects the IRC client Irssi prior to 1.0.3. When receiving a DCC message without a source nick/host, Irssi dereferences a NULL pointer, which can cause a remote crash (denial of service). Affected software is Irssi (DCC handling). Root cause: NULL pointer derefe...

CVE-2018-10888

CVE-2018-10888 affects libgit2 prior to 0.27.3 where a missing check in git_delta_apply (delta-apply.c) can cause an out-of-bounds read while reading a binary delta file, enabling Denial of Service. Connected advisories confirm related fixes in later libgit2 releases (e.g., openSUSE/SUSE advisori...

CVE-2018-6036

CVE-2018-6036 is an integer underflow in WebAssembly within Google Chrome64-bit era (V8) that could allow a remote attacker to leak user data via a crafted HTML page. The vulnerability was fixed in the Chrome stable update 64.0.3282.119; affected products are Google Chrome released before that v...

CVE-2019-13033

In the CISOfy Lynis family, CVE-2019-13033 affects Lynis 2.x up to 2.7.5, where the license key can be exposed by inspecting the process list during a data upload. The license can be used to upload data to a central Lynis server, potentially enabling insertion of data from additional scans, thoug...

CVE-2019-9658

CVE-2019-9658 affects Checkstyle (com.puppycrawl.tools:checkstyle). Multiple connected sources confirm that versions prior to 8.29 are vulnerable to XML External Entity (XXE) Injection due to an incomplete fix for CVE-2019-9658. The root cause is an incomplete/partial mitigation in the earlier fi...

CVE-2020-21598

CVE-2020-21598 affects libde265 v1.0.4, where a heap buffer overflow in ff_hevc_put_unweighted_pred_8_sse can be triggered by a crafted file. Public advisories (e.g., Debian/DLA-3280-1 and Gentoo GLSA) indicate upgrading libde265 to 1.0.11 or newer to remediate. Other connected sources reiterate ...

CVE-2020-25739

The CVE-2020-25739 issue affects the gon Ruby gem prior to version 6.4.0. The root cause is that MultiJson does not honor the escape_mode setting, reducing XSS protection when converting data to JSON. As a mitigation, the json_dumper.rb in gon now escapes for XSS by default, independent of MultiJ...

CVE-2020-26519

MuPDF (Artifex) prior to version 1.18.0 is affected by a heap-based buffer over-write while parsing JBIG2 files, which can cause a denial of service and, per Debian advisories, may lead to arbitrary code execution if malformed documents are opened. The issue is addressed in MuPDF 1.18.0 and later...

CVE-2020-6497

CVE-2020-6497 is a policy enforcement issue in Omnibox on Google Chrome for iOS, allowing domain spoofing via a crafted URI. The connected Nessus entries confirm this CVE is part of the Chrome 83.0.4103.88– era fixes set. Affected component: Omnibox URL handling; root cause: insufficient policy e...

CVE-2021-3735

CVE-2021-3735 describes a deadlock in the AHCI controller device of QEMU. The issue occurs during a software reset (ahci_reset_port) while processing a host-to-device Register FIS from a guest, allowing a privileged guest user to hang the QEMU process on the host and cause a denial of service. Co...

CVE-2022-2735

CVE-2022-2735 affects the PCS project. The root cause is incorrect permissions on the Unix socket used for internal PCS daemon communication, enabling a privilege escalation by obtaining an authentication token for a hacluster user. With that token, an attacker could gain complete control over th...

CVE-2022-43252

CVE-2022-43252 affects libde265 v1.0.8 and is a heap-buffer-overflow in put_epel_16_fallback (fallback-motion.cc), enabling DoS via a crafted video file. Publicly documented instances reference the issue across multiple OS advisories (Debian DSA 5346-1 for Debian, USN 6627-1 for Cloud Foundry, Ge...

CVE-2023-39351

CVE-2023-39351 affects FreeRDP (RDP client/server library). The issue is a null pointer dereference in the RemoteFX (rfx) path: in rfx_process_message_tileset, tiles are allocated via rfx_allocate_tiles for numTiles, but if initialization fails some tiles remain NULL and may be accessed later, ca...

CVE-2025-23143

CVE-2025-23143 is a Linux kernel issue where unloading a module (e.g., CIFS/NFS) can race with a TCP socket still alive, leading to a NULL pointer dereference in lockdep when hlock_class() is called after the module is gone. The root cause is that CIFS assigns a different lock class to the socket...

CVE-2025-37931

CVE-2025-37931 (btrfs) affects the Linux kernel’s btrfs metadata write path. The issue arises when writing subpage extent buffers (EBs) with a 64k page size, 16k nodsz, and a 4k sectorsize, where the bitmap addressing is based on sectors, yielding 4 bits per node. If a dirty range is found, the c...

CVE-2025-38348

The CVE-2025-38348 issue is in the Linux kernel wifi driver for the Intersil p54 interface. A malicious USB device could cause a buffer over-read in p54_rx_eeprom_readback() by tampering v1/v2 eeprom length fields, potentially crashing the host. A patch was applied to store the eeprom size in the...

CVE-2025-38494

CVE-2025-38494 (Linux kernel) : In the HID core, hid_hw_raw_request() checks were bypassed by a low-level transport path, allowing the use of invalid parameters. The vulnerability was resolved in the Linux kernel; advisories from Debian/Amazon/RHEL references confirm the fix. Impact is high (loca...

CVE-2005-1260

CVE-2005-1260 describes a remote denial-of-service vulnerability in bzip2 where a crafted archive can cause an infinite loop during decompression, potentially exhausting disk space. Public documents show this issue alongside a related local race condition (CVE-2005-0953) and note that untrusted a...

CVE-2007-5191

The CVE-2007-5191 issue concerns util-linux: the mount and umount utilities call setuid/setgid in the wrong order and do not check return values, which could allow a local attacker to elevate privileges via helper programs (e.g., mount.nfs). Affected component: util-linux (mount/umount). Impact: ...

CVE-2010-3874

CVE-2010-3874: Heap-based buffer overflow in the bcm_connect function of net/can/bcm.c (Broadcast Manager) in the Linux kernel CAN implementation. Affects 64-bit kernels, before 2.6.36.2, enabling local attackers to cause memory corruption and a denial of service via a connect operation. The conn...

CVE-2012-3955

CVE-2012-3955 affects ISC DHCP 4.1.x prior to 4.1-ESV-R7 and 4.2.x prior to 4.2.4-P2. In opportunistic scenarios, remote attackers can cause a denial of service (daemon crash) by establishing an IPv6 lease when the lease expiration time is later reduced. Remediation is to upgrade to ISC DHCP 4.1-...

CVE-2013-2166

The CVE-2013-2166 entry concerns python-keystoneclient versions 0.2.3 to 0.2.5, where the middleware memcache encryption bypass is documented. Multiple connected records (GHSA-C3XQ-CJ8F-7829 and OSV entries) confirm the same issue and reference advisories like RHSA-2013:0992. The vulnerability ce...

CVE-2014-1511

CVE-2014-1511 affects Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25. The issue is described as a remote bypass of the popup blocker via unspecified vectors. Public security advisories in 2014 consolidate Firefox/Thunderbird/SeaMonkey...

CVE-2014-4667

CVE-2014-4667 affects the Linux kernel: the sctp_association_free function in net/sctp/associola.c before version 3.15.2 fails to properly manage a specific backlog value, enabling remote attackers to trigger a denial of service (socket outage) via a crafted SCTP packet. The vulnerability is root...

CVE-2014-9093

CVE-2014-9093 affects LibreOffice prior to 4.3.5, where a crafted RTF file can cause a denial of service (invalid write) and may allow arbitrary code execution. The issue is tied to LibreOffice’s RTF handling; confirmed by the initial description. Remediation: upgrade to LibreOffice 4.3.5 or newe...

CVE-2015-7295

CVE-2015-7295 affects QEMU virtio-net (Virtual Network Device) where, if big or mergeable receive buffers are not supported, a remote attacker can cause a denial of service by flooding jumbo frames on tuntap or macvtap, exhausting guest network receive buffers. Affected product area: QEMU’s virti...

CVE-2016-2342

The CVE-2016-2342 issue affects Quagga’s bgpd component, specifically the VPNv4 NLRI parser (bgp_mplsvpn.c). A stack-based buffer overflow arises when handling Labeled-VPN SAFI routes data due to incorrect length handling during a data copy, enabling a remote attacker to potentially execute arbit...

CVE-2016-6835

CVE-2016-6835 — QEMU vmxnet_tx_pkt_parse_headers vulnerability in hw/net/vmxnet_tx_pkt.c allows a local guest OS administrator to trigger a denial of service via a buffer over-read caused by failing to check the IP header length. This is a local, attacker-privileged issue inside the guest, with p...

CVE-2016-7447

GraphicsMagick (before 1.3.25) is affected by a heap-based buffer overflow in the EscapeParenthesis function. The CVE-2016-7447 entry notes remote, unspecified impact via unknown vectors. Multiple external advisories indicate fixes in newer releases (e.g., 1.3.25 per openSUSE/SUSE notes; Debian a...

CVE-2016-7908

CVE-2016-7908 refers to a DoS in QEMU where the mcf_fec_do_tx path does not properly cap the buffer descriptor count during transmit. A local guest administrator can trigger an infinite loop and QEMU process crash by crafting a 0-length BD with specific bd.flags values. Public listings (Debian se...

CVE-2017-12375

CVE-2017-12375 affects ClamAV before 0.99.3, where improper input validation in the rfc2047 handling of mbox.c can be exploited by a crafted email to trigger a buffer overflow and cause DoS on an affected device. Documents confirm the vulnerability is remote, unauthenticated, and tied to mail par...

CVE-2017-12643

CVE-2017-12643 targets ImageMagick 7.0.6-1, with a memory exhaustion vulnerability in ReadOneJNGImage() inside coders/png.c. The associated Nessus entry (UNPATCHED_CVE_2017_12643.NASL) notes that this vulnerability affects Linux distros and that a vendor patch is not available, indicating an unpa...