CVE-2017-12102

CVE-2017-12102 refers to an exploitable integer overflow in Blender 2.78c where the conversion of curves to polygons can overflow, potentially causing a buffer overflow and code execution when a user opens a crafted .blend file or uses it as a library. Public records note this vulnerability along...

CVE-2017-15424

Google Chrome Omnibox vulnerability CVE-2017-15424: insufficient policy enforcement allows domain spoofing via IDN homographs in crafted domain names, affecting versions prior to 63.0.3239.84. Debian and other advisories indicate fix to 63.0.3239.84-1~deb9u1 and related patches; upgrade to 63.0.3...

CVE-2017-5036

CVE-2017-5036 is a use-after-free in the PDFium component of Chromium/Google Chrome. Affects desktop Chrome prior to 57.0.2987.98 and Android prior to 57.0.2987.108, exploitable via a crafted PDF file with the impact described as unspecified in the initial entry. Connected sources corroborate the...

CVE-2017-5114

CVE-2017-5114 affects chromium-browser via an improper use of partition alloc in PDFium, enabling memory corruption through a crafted PDF. The Debian advisories note multiple Chromium CVEs (including 5114) and state fixes are available in the Chromium package by version 61.0.3163.100-1~deb9u1 for...

CVE-2017-5117

CVE-2017-5117 relates to an uninitialized value in the Skia library used by Chromium/Chrome. The initial entry notes a remote attacker could obtain potentially sensitive information from process memory via a crafted HTML page in Chrome prior to 61.0.3163.79 (Linux/Windows). Connected Debian advis...

CVE-2017-5129

CVE-2017-5129 is a use-after-free vulnerability in the WebAudio component of the Chromium Blink stack used by Google Chrome, present in versions prior to 62.0.3202.62. A crafted HTML page can trigger a use-after-free that allows an out-of-bounds memory read. Multiple connected sources (including ...

CVE-2017-6009

CVE-2017-6009 : In icoutils, a buffer overflow in decode_ne_resource_id (restable.c) arises from an unchecked negative length used in memcpy, potentially allowing code execution or crash via crafted input read by wrestool. The Debian/DSA and CentOS advisories confirm multiple related issues in ic...

CVE-2018-17281

CVE-2018-17281 affects the Asterisk res_http_websocket.so module and allows an attacker to crash Asterisk by sending a crafted HTTP Upgrade request to websocket. Affected: Asterisk up to 13.23.0, 14.7.x up to 14.7.7, 15.x up to 15.6.0, and Certified Asterisk up to 13.21-cert2. Consequences: denia...

CVE-2018-6147

CVE-2018-6147 affects Google Chrome on macOS (pre-67.0.3396.62). Root cause: lack of secure text entry mode in the Browser UI password fields. Impact: a local attacker could obtain potentially sensitive data from process memory via a local process. Remediation: update to a fixed Chromium/Chrome r...

CVE-2018-7053

CVE-2018-7053 affects Irssi prior to 1.0.7 and 1.1.x prior to 1.1.1, with a use-after-free when SASL messages are received in an unexpected order. The vulnerability has been addressed in multiple advisories across distributions (e.g., Debian DSA-4162-1 fixes Irssi to 1.0.7-1~deb9u1; Mageia/ Fedor...

CVE-2019-5086

The CVE-2019-5086 vulnerability affects xcftools 1.0.7, specifically the flattenIncrementally function in the xcf2png and xcf2pnm binaries. An integer overflow can occur while walking tiles in a specially crafted XCF file, potentially corrupting memory and allowing arbitrary code execution. Publi...

CVE-2020-11061

The CVE-2020-11061 entry relates to Bareos Director (versions ≤ 16.2.10, 17.2.9, 18.2.8, 19.2.7). A heap overflow allows a malicious client to corrupt the director’s memory via oversized digest strings during verify-job initialization. Mitigation is to disable verify jobs. Patches are available i...

CVE-2020-1944

CVE-2020-1944 affects Apache Traffic Server (versions 6.0.0–6.2.3, 7.0.0–7.1.8, 8.0.0–8.0.5). The vulnerability is a smuggling attack involving Transfer-Encoding and Content-Length headers. The issue is severe: CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector, no authentication, and ...

CVE-2021-32566

Apache Traffic Server is affected by CVE-2021-32566 (Improper Input Validation in HTTP/2) which can lead to denial of service. The vulnerability affects ATS versions 7.0.0–7.1.12, 8.0.0–8.1.1, and 9.0.0–9.0.1. Evidence from multiple sources confirms the issue and its impact on availability (NVD C...

CVE-2021-33833

ConnMan (Connection Manager) 1.30–1.39 contains a stack-based buffer overflow in dnsproxy.c uncompress when handling DNS NAME/RDATA/RDLENGTH for A/AAAA. This can allow a remote attacker to crash or execute code. Upstream fixes are available in version 1.40 (or later); affected users should upgrad...

CVE-2022-24851

CVE-2022-24851 affects LDAP Account Manager (LAM). The stored XSS flaws occur in the profile editor (edit profile) and in the pdf editor (logoFile path handling), with attacker-controlled payloads when logged into the LAM admin interface. Both issues require an authenticated admin user to exploit...

CVE-2022-31778

CVE-2022-31778 involves an ** Improper Input Validation** vulnerability in Apache Traffic Server’s handling of the Transfer-Encoding header, allowing an attacker to poison the cache. Affected products/versions: Apache Traffic Server 8.0.0–9.0.2 . Root cause (as stated): improper input validation ...

CVE-2022-33746

CVE-2022-33746 is a Xen hypervisor issue where the P2M pool backing second-level address translation for guests can become very large, causing freeing to take longer than expected due to lack of preemption checks. The vulnerability is discussed in multiple connected advisories across distribution...

CVE-2023-40186

CVE-2023-40186 affects FreeRDP clients (not proxies). The issue is an integer overflow in the gdi_CreateSurface path that leads to an Out-of-Bounds Write. The vulnerability is fixed in FreeRDP releases 2.11.0 and 3.0.0-beta3. Affected products: FreeRDP-based clients; no details about exploitation...

CVE-2023-40188

CVE-2023-40188 affects FreeRDP (freerdp2) and is caused by an Out-Of-Bounds Read in the general_LumaToYUV444 function when processing the in buffer without sufficient length validation. Affected versions are addressed in 2.11.0 and 3.0.0-beta3; upgrading to these or later versions is advised. Con...

CVE-2024-46955

CVE-2024-46955 : Ghostscript contains an out-of-bounds read in psi/zcolor.c when reading color in Indexed color space, before version 10.04.0. Impact is a local issue with user interaction required (per CVSS details: AV:L, UI:R, Availability:A:H). The fix is indicated by the ghostpdl-10.04.0 comm...

CVE-2025-38051

CVE-2025-38051 affects the Linux kernel CIFS client: a race in the readdir/concurrency path allows a use-after-free in cifs_fill_dirent when the rsp buffer is freed, leading to a reported KASAN-use-after-free. The vulnerability is tracked with a CVSSv3.1 vector of CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U...

CVE-2025-38061

CVE-2025-38061 (Linux kernel, net: pktgen) is described in connected Nessus/OS advisories as a fix for an out-of-bounds memory access in pktgen_thread_write. The root cause is failing to honor the user-supplied buffer size in strn_len() calls, which could cause memory access outside the buffer. T...

CVE-2025-38095

CVE-2025-38095 affects the Linux kernel dma-buf path. The issue arises from inserting a memory barrier before updating num_fences: smp_store_mb() currently inserts the barrier after the storing operation, which can reorder memory updates contrary to the original intent, potentially triggering a N...

CVE-2025-38100

CVE-2025-38100 affects the Linux kernel (x86/iopl). The issue arises when a task with TIF_IO_BITMAP set lacks an installed bitmap, causing tss_update_io_bitmap() to dereference NULL. Two problems are fixed: (1) io_bitmap_exit() no longer calls task_update_io_bitmap() for non-current tasks (cleanu...

CVE-2025-38190

CVE-2025-38190 affects the Linux kernel ATM path. The issue arises when in the vcc_sendmsg() path, skb->truesize is accounted to sk_wmem_alloc via atm_account_tx(), but the corresponding revert is not performed on copy_from_iter_full() failure, potentially leaking a socket. The fixed approach ...

CVE-2025-38364

CVE-2025-38364 pertains to Linux kernel Maple_tree: MA_STATE_PREALLOC handling in mas_preallocate. The flaw prevented allocations when MA_STATE_PREALLOC was set; preallocation checks could undercount, leading to a WARN_ON() and a subsequent null pointer dereference on larger future requests (e.g....

CVE-2025-38437

CVE-2025-38437 : In the Linux kernel, a use-after-free in ksmbd during oplock/lease break ack was fixed. If ksmbd_iov_pin_rsp returns an error, use-after-free can occur by accessing opinfo->state and opinfo_put, and ksmbd_fd_put could be called twice. The vulnerability affects the ksmbd compon...

CVE-2025-39766

CVE-2025-39766 : In the Linux kernel, the net/sched cake_enqueue path was fixed to return NET_XMIT_CN when dropping packets due to a very small buffer_limit, preventing htb_enqueue from activating an empty child qdisc. The issue caused packet drops to be signaled as NET_XMIT_SUCCESS, leading to f...

CVE-1999-1572

CVE-1999-1572 is a local vulnerability affecting GNU cpio where a 0 umask is used when creating files with -O/-F, causing output files to have mode 0666 and enabling local users to read or overwrite them. Connected advisories (RHSA-2005:806, RHSA-2005:073, DSA-664-1, USN-75-1, Ubuntu USN-80-1, Ce...

CVE-2007-6284

CVE-2007-6284 describes a denial-of-service vulnerability in libxml2 where the function xmlCurrentChar() mishandles certain UTF-8 sequences, allowing context-dependent attackers to cause an infinite loop or high CPU consumption when parsing XML. The issue is triggered by malformed XML content and...

CVE-2008-0062

MIT Kerberos 5 krb5kdc is affected by CVE-2008-0062 (and related CVEs) where the KDC may crash or possibly allow remote code execution via crafted Kerberos v4 messages, due to not initializing a global variable which can cause a NULL pointer dereference or a double-free. This results in denial of...

CVE-2008-2662

CVE-2008-2662 is a Ruby vulnerability: multiple integer overflows in rb_str_buf_append() across Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2. These overflows allow context-dependent attackers to execute arbitrary code o...

CVE-2008-4934

The CVE-2008-4934 issue affects the Linux kernel 2.6.x prior to 2.6.28-rc1 in the hfsplus code path. Specifically, hfsplus_block_allocate in fs/hfsplus/bitmap.c fails to verify the return value of read_mapping_page before invoking kmap, enabling a crafted hfsplus filesystem image to trigger a den...

CVE-2008-5017

CVE-2008-5017 is an integer overflow in xpcom/io/nsEscape.cpp in the Mozilla browser engine. The vulnerability could allow a remote attacker to crash the affected application (DoS) via unspecified vectors in Mozilla Firefox 3.x prior to 3.0.4, Firefox 2.x prior to 2.0.0.18, Thunderbird 2.x prior ...

CVE-2010-4577

CVE-2010-4577 affects WebKit/WebKitGTK+ in the CSSParser::parseFontFaceSrc path, enabling an out-of-bounds read and denial of service via a crafted local font. Affected products include WebKit-based browsers (e.g., Google Chrome before 8.0.552.224; webkitgtk before 1.2.6). Remediation noted acros...

CVE-2011-2748

CVE-2011-2748 affects ISC DHCP server in 3.x/4.x before 4.2.2, 3.1-ESV before 3.1-ESV-R3, and 4.1-ESV before 4.1-ESV-R3. A crafted DHCP (or BOOTP) packet can cause remote denial of service by terminating the dhcpd daemon. Remediation: upgrade to patched releases (e.g., 4.2.2, 3.1-ESV-R3, 4.1-ESV-...

CVE-2011-2923

CVE-2011-2923 concerns the foomatic-rip filter (all versions) where insecure use of temporary files for storage of PostScript data occurs when debug mode is enabled. The vulnerability stems from rendering the data with debug-enabled temporary files, which an attacker with local access can abuse t...

CVE-2012-4180

CVE-2012-4180 : A heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox prior to 16.0 (and Firefox ESR 10.x prior to 10.0.8; Thunderbird prior to 16.0; Thunderbird ESR 10.x prior to 10.0.8; SeaMonkey prior to 2.13) could allow remote code execution...

CVE-2012-4216

CVE-2012-4216 is a use-after-free in gfxFont::GetFontEntry affecting Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14. Exploitation could lead to remote code execution or a denial of service via h...

CVE-2012-4564

CVE-2012-4564 is described in connected documents as a LibTIFF/ppm2tiff issue where ppm2tiff does not check the return value of TIFFScanlineSize, enabling a crafted PPM image to trigger an integer overflow, a zero-memory allocation, and a heap-based buffer overflow that can lead to a denial of se...

CVE-2013-2881

CVE-2013-2881 affects Chromium/Google Chrome prior to 28.0.1500.95, where improper handling of frames allowed remote attackers to bypass the Same Origin Policy via a crafted website. Debian’s advisory and multiple security bulletins confirm the vulnerability and list CVE-2013-2881 among others, w...

CVE-2013-4243

CVE-2013-4243 is a heap-based buffer overflow in the gif2tiff tool (libtiff 4.0.3 and earlier) triggered by crafted GIF height/width values, leading to denial of service or possible arbitrary code execution. Affected component: libtiff’s gif2tiff, via readgifimage. Public advisories show fixes ar...

CVE-2014-3694

The CVE-2014-3694 issue affects Pidgin/libpurple: the bundled GnuTLS and OpenSSL SSL/TLS plugins do not correctly handle the Basic Constraints extension when verifying X.509 certificates, enabling MITM attackers to spoof servers or obtain sensitive data via crafted certificates. The vulnerability...

CVE-2014-4913

CVE-2014-4913 (ZF2014-03) describes a cross-site scripting vulnerability in Zend Framework caused by insufficient validation of client-side data in multiple view helpers. Affected versions include Zend Framework before 2.2.7 and before 2.3.1. Impact is potential execution of arbitrary script in u...

CVE-2015-1273

CVE-2015-1273 is a heap-buffer-overflow in OpenJPEG (j2k.c) used by PDFium inside Google Chrome/Chromium. The vulnerability is triggered by invalid JPEG2000 data within PDFs, potentially causing a denial of service or other impact. Affected product: Chromium-based browsers (Chrome/Chromium) prior...

CVE-2015-3279

CVE-2015-3279 (and CVE-2015-3258) affects cups-filters texttopdf in the texttopdf filter of cups-filters. The vulnerability is a heap-based buffer overflow (and associated integer overflow) triggered by processing a print job with a crafted line size, allowing remote attackers to crash texttopdf ...

CVE-2015-4171

CVE-2015-4171 affects strongSwan 4.3.0–5.x prior to 5.3.2 and strongSwan VPN Client prior to 1.4.6. The issue lets remote servers obtain credentials during IKEv2 authentication by bypassing server-auth restrictions until full auth completes. Affected products/versions are confirmed in multiple do...

CVE-2015-8875

CVE-2015-8875 affects the GDK-PixBuf library, specifically the pixops.c implementations (pixops_composite_nearest, pixops_composite_color_nearest, pixops_process) in gdk-pixbuf, with versions before 2.33.1 vulnerable. The flaw is a heap-based buffer overflow triggered by crafted images, enabling ...

CVE-2016-2191

OptiPNG before 0.7.6 is affected by a vulnerability in bmp_read_rows (pngxtern/pngxrbmp.c) triggered by crafting BMP delta escapes. The issue can cause an invalid memory write and crash, enabling a denial of service. Some advisories also note potential arbitrary code execution in certain contexts...