CVE-2022-23772

CVE-2022-23772 affects Go (golang) where Rat.SetString in math/big can overflow, leading to uncontrolled memory consumption. Connected advisories confirm this issue alongside other Go vulnerabilities (e.g., CVE-2022-23773, CVE-2022-23806) across multiple Go components (cmd/go, crypto/elliptic, ar...

CVE-2018-0732

CVE-2018-0732 : OpenSSL vulnerability where, during TLS handshakes using DH(E) ciphersuites, a malicious server could send an excessively large prime, causing the client to spend an unreasonably long time computing a key and hang (DoS). The issue is specific to DH parameters during the Server Key...

CVE-2019-19956

Summary (CVE-2019-19956) libxml2 before 2.9.10 contains a memory leak in xmlParseBalancedChunkMemoryRecover (parser.c) related to newDoc->oldNs. This can lead to memory not being freed (partial impact noted) and, per mapped references, contributes to DoS scenarios. The CVSS data across sources...

CVE-2020-27171

The vulnerability CVE-2020-27171 affects Linux kernels before 5.11.8. The issue is in kernel/bpf/verifier.c, where an off-by-one error enables integer underflow that can trigger out-of-bounds speculation in pointer arithmetic, allowing side-channel leakage of kernel memory and defeating Spectre m...

CVE-2021-33910

CVE-2021-33910 affects systemd prior to versions 246.15, 247.8, 248.5, and 249.1. The root cause is a Memory Allocation with an Excessive Size Value in basic/unit-name.c involving strdupa and alloca for a pathname controlled by a local attacker, leading to a crash of the operating system (denial ...

CVE-2023-4004

CVE-2023-4004 is a use-after-free in the Linux kernel’s netfilter nft_pipapo_remove() path when triggering the element without NFT_SET_EXT_KEY_END. This vulnerability can let a local attacker crash the system or potentially escalate privileges. The issue is tied to nf_tables/netfilter behavior an...

CVE-2016-3092

CVE-2016-3092 is a DoS in Apache Commons FileUpload via a crafted long multipart boundary. Affected: Commons FileUpload before 1.3.2 used in Tomcat 7.x up to 7.0.70, Tomcat 8.x up to 8.0.36, Tomcat 8.5.x up to 8.5.3, Tomcat 9.x up to 9.0.0.M7, and other products. Root cause: boundary length trigg...

CVE-2021-29155

CVE-2021-29155 is a Linux kernel issue affecting the eBPF verifier path (kernel/bpf/verifier.c) that allows speculative-out-of-bounds memory accesses to leak kernel memory via side-channels. The description from connected documents ties the vulnerability to Spectre mitigations and notes that a lo...

CVE-2023-3609

CVE-2023-3609 is a Linux kernel use-after-free in the net/sched: cls_u32 classifier. The flaw arises when tcf_change_indev() fails; u32_set_parms() returns after updating the reference counter in tcf_bind_filter(), and an attacker who can manipulate the reference counter to zero can cause the ref...

CVE-2019-14870

Summary: CVE-2019-14870 affects Samba. Prior to fixed releases, Samba AD DC did not honor the not-delegated (delegation_not_allowed) flag for S4U2Self, causing the forwardable flag to be set on tickets for impersonated clients. This decoding flaw in the Kerberos delegation model could enable unin...

CVE-2020-24489

CVE-2020-24489 concerns incomplete cleanup in some Intel VT-d products enabling potential local-privilege escalation for an authenticated user. Connected advisories confirm mitigation via Intel CPU microcode updates delivered through distribution security advisories (e.g., intel-microcode/microco...

CVE-2020-25285

CVE-2020-25285 is a race condition in the Linux kernel hugetlb sysctl handlers (mm/hugetlb.c) that could allow a local attacker to corrupt memory or trigger NULL pointer dereferences. Public docs (e.g., ChangeLog-5.8.8) indicate the fix was released in kernel 5.8.8; Ubuntu/Debian advisories refer...

CVE-2022-31197

PgJDBC (PostgreSQL JDBC Driver) is affected by CVE-2022-31197 due to the java.sql.ResultRow.refreshRow() not escaping column names, enabling SQL injection when a column name contains a terminator like ;. Attack requires tricking a user into running SQL against a table with malicious column names ...

CVE-2023-4761

CVE-2023-4761 is a memory‑safety issue in FedCM within Google Chrome/Chromium prior to 116.0.5845.179, allowing a renderer‑compromised attacker to perform an out‑of‑bounds memory read via a crafted page (severity HIGH). Connected sources confirm affected products include Chromium/Chrome; Debian a...

CVE-2024-24549

Summary (CVE-2024-24549) Denial-of-Service in Apache Tomcat due to improper input validation for HTTP/2 headers. When an HTTP/2 request exceeds header limits, the HTTP/2 stream is not reset until after all headers are processed, allowing resource exhaustion in affected streams. Affected Tomcat ve...

CVE-2018-10548

CVE-2018-10548 affects PHP’s ext/ldap/ldap.c, where mishandling of the ldap_get_dn return value enables a remote LDAP server to trigger a NULL pointer dereference and cause denial of service (application crash). Affected branches: PHP 5.6.x up to 5.6.36, 7.0.x up to 7.0.30, 7.1.x up to 7.1.17, an...

CVE-2018-20836

CVE-2018-20836 : A race condition in the Linux kernel before 4.20, specifically in drivers/scsi/libsas/sas_expander.c (smp_task_timedout() vs smp_task_done()), can lead to a use-after-free. Affected: Linux kernel versions prior to 4.20. Impact is described as high by CVSS. The provided documents ...

CVE-2019-18634

CVE-2019-18634 describes a stack-based buffer overflow in sudo when pwfeedback is enabled in /etc/sudoers. The issue is exploitable locally and affects versions prior to the upstream fix. Connected sources specify that upstream remediation occurs in sudo 1.8.31 (Arch Linux ASA-202002-2 notes fix ...

CVE-2021-32626

CVE-2021-32626 affects Redis with Lua scripting. Specifically crafted Lua scripts can overflow the heap-based Lua stack due to insufficient checks, leading to heap corruption and potential remote code execution. Affected: Redis versions supporting Lua scripting (from 2.6 onward). Remediation: upg...

CVE-2019-19921

Technical details about CVE-2019-19921 are not publicly available in the provided Connected documents. The entries reference related advisories, but no concrete affected versions, root cause, or fixes are included here. Monitor for updates.

CVE-2021-29505

CVE-2021-29505 affects XStream (Java XML serialization) in versions before 1.4.17. The public docs indicate the fix is in 1.4.17; multiple advisories (Debian, Fedora, Amazon Linux, Astra Linux) reference this CVE in the context of libxstream-java. Atlassian Jira Server/Data Center reports indicat...

CVE-2021-31799

CVE-2021-31799 affects RDoc (3.11–6.x, before 6.3.1) packaged with Ruby up to 3.0.1. An attacker can execute arbitrary code via special characters in a filename when running rdoc, enabling OS command execution. The connected advisories and vendor pages confirm the issue and remediation path. Impa...

CVE-2023-27954

CVE-2023-27954 affects WebKitGTK/WebKit2GTK (WebKitGTK/WebKit2GTK family). The publicly cited description indicates that a website may be able to track sensitive user information. Debian LTS and Debian security advisories list CVE-2023-27954 among fixed issues for webkit2gtk, with fixed versions ...

CVE-2020-11008

Technical details for CVE-2020-11008 are not present in the provided connected documents. The sources discuss related CVEs and general Git credential leakage vectors but do not specify affected versions, root cause, fixes, or exploitation status for this CVE. Monitor for updates.

CVE-2023-42795

CVE-2023-42795 is an Apache Tomcat Incomplete Cleanup vulnerability. When recycling internal objects during request handling, Tomcat could skip parts of the recycling process, causing information leakage from the current request/response to the next. Affected versions include 11.0.0-M1 through 11...

CVE-2019-11810

CVE-2019-11810 affects the Linux kernel up to version before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails inside megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c, leading to a Denial of Service tied to a use-after-free. Public advisories note...

CVE-2020-25704

CVE-2020-25704 describes a memory leak in the Linux kernel perf subsystem when using PERF_EVENT_IOC_SET_FILTER, enabling a local user to exhaust resources and cause a denial of service. The vulnerability is reiterated across multiple advisories (e.g., ALAS2KERNEL, ALAS-2020-1566, Debian/AlmaLinux...

CVE-2021-21342

CVE-2021-21342 affects the Java library XStream (prior to 1.4.16). During unmarshalling, the processed input stream can include type information used to recreate objects, enabling an attacker to inject/replace objects and trigger a server-side forgery. The documented fix is to upgrade to at least...

CVE-2019-16275

CVE-2019-16275 affects hostapd and wpa_supplicant prior to 2.10. The root cause is misvalidation of the source address on certain received 802.11 management frames when PMF (IEEE 802.11w) is enabled, enabling a denial-of-service by an attacker within radio range. Impact is Denial of Service (disc...

CVE-2017-15275

CVE-2017-15275 is a memory disclosure in Samba where server heap memory may be returned to the client without being cleared. Connected advisories confirm this affects Samba releases prior to fixed versions (e.g., Mariner: = 4.18.3-1 for Mariner; Samba >= 4.7.3-1 per other advisories). If explo...

CVE-2018-3133

CVE-2018-3133 concerns Oracle MySQL Server (subcomponent: Server: Parser). Affected are MySQL Server versions 5.5.61 and earlier, 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier. An attacker with network access via multiple protocols and low privileges can trigger a hang or frequen...

CVE-2019-15666

CVE-2019-15666 affects the Linux kernel prior to 5.0.19, with an out-of-bounds array access in __xfrm_policy_unlink caused by improper directory validation in net/xfrm/xfrm_user.c. This can lead to denial of service. Nexus/connected advisories confirm the same impact and recommend upgrading the k...

CVE-2021-3634

CVE-2021-3634 affects libssh

CVE-2022-23308

CVE-2022-23308 affects libxml2 before 2.9.13, caused by a use-after-free in ID/IDREF attributes in valid.c. The NVD data shows a CVSS 3.1 base score of 7.5 (NETWORK, PR:N, UI:N, S:U, C:N/I:N/A:H) and CVSS 2.0 base score of 4.3 (NETWORK, A:P). Connected advisories confirm the same flaw and referen...

CVE-2022-24921

CVE-2022-24921 affects the Go language’s standard library (regexp.Compile). The issue allows stack exhaustion via a deeply nested regular expression, leading to denial of service. The root cause is a vulnerability in regexp handling that can consume stack memory under certain inputs. Rationale: i...

CVE-2016-1238

CVE-2016-1238 affects SpamAssassin (Debian advisory DLA-1578-1). The issue arises when Perl programs do not properly remove trailing periods from the includes directory array, which can allow a local attacker to load a Trojan horse module from the current working directory and gain privileges. De...

CVE-2020-15250

CVE-2020-15250 affects JUnit4 TemporaryFolder information disclosure in Unix-like environments where the system tmp dir is shared among users. Affected: JUnit4 versions before 4.13.1; fixed in 4.13.1 for Java 7+; Java 6 and earlier have no patch. Workarounds include running tests with a dedicated...

CVE-2021-37136

CVE-2021-37136 : The Bzip2 decompression decoder can set no limit on the decompressed output size, affecting all Bzip2Decoder users. This under- or over-allocates memory during decompression and can trigger an OutOfMemoryError, enabling DoS. Connected IBM/ASTRA entries reiterate the same descript...

CVE-2022-1664

CVE-2022-1664 affects dpkg: Dpkg::Source::Archive allows directory traversal during in-place extraction of untrusted v2/v3 source packages that include debian.tar. Affected versions are dpkg before 1.21.8, 1.20.10, 1.19.8, and 1.18.26. Mitigation: upgrade to a fixed dpkg version (e.g., 1.21.8 or ...

CVE-2018-16395

The CVE describes a bug in Ruby’s OpenSSL X509::Name equality check. Affected Ruby/OpenSSL versions are 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared, depending on ordering, non-equal names may compar...

CVE-2020-8623

CVE-2020-8623 affects BIND up to various maintained branches (notably 9.10.0–9.17.x). Root cause: native PKCS#11 code can trigger an assertion failure when processing queries for RSA-signed zones if BIND is built with --enable-native-pkcs11, leading to a crash and potential availability impact. A...

CVE-2017-8807

Varnish Cache CVE-2017-8807 affects 4.1.x before 4.1.9 and 5.x before 5.2.1. The flaw is in vbf_stp_error in bin/varnishd/cache/cache_fetch.c where a VFP_GetStorage buffer is larger than intended during -sfile Stevedore transient objects, allowing remote attackers to read memory from the process....

CVE-2018-14721

CVE-2018-14721 affects FasterXML jackson-databind 2.x up to 2.9.6 (before 2.9.7). The flaw allows remote attackers to perform SSRF by failing to block axis2-jaxws class during polymorphic deserialization, enabling server-side requests under network access. The vulnerability is tied to the misuse ...

CVE-2024-32004

CVE-2024-32004 affects Git and enables arbitrary code execution during cloning when a local repository is crafted by an attacker. It targets pre-patch releases prior to 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. Affected versions can execute code during the clone operation if the...

CVE-2019-15239

The CVE-2019-15239 issue arises from a backported net/ipv4/tcp_output.c change in some 4.9.x and 4.14.x long-term Linux kernels that was correctly fixed in 4.16.12 but incorrectly backported to older LT kernels. This regression enables a local attacker to add to a write queue between disconnectio...

CVE-2020-8649

CVE-2020-8649 is a Linux kernel use-after-free in vgacon_invert_region (drivers/video/console/vgacon.c). The vulnerability, reported as CVE-2020-8649, could lead to memory corruption or DoS via the vgacon driver when a virtual terminal is accessed. Public details in Debian security advisories (DL...

CVE-2021-21343

CVE-2021-21343 affects XStream (Java) prior to 1.4.16. The vulnerability arises during unmarshalling when the processed input stream carries type information, enabling an attacker to create new instances based on that data and potentially replace or inject objects, including causing local file de...

CVE-2021-22924

CVE-2021-22924 — libcurl connection reuse flaw : The issue arises when libcurl reuses connections from its pool without correctly accounting for the issuer certificate and with path comparisons that are case-insensitive. This can cause a transfer to use the wrong, previously opened connection. Pu...

CVE-2021-42340

The CVE-2021-42340 issue is a memory leak in Apache Tomcat caused by the upgrade HTTP metric collector not releasing WebSocket resources after close. Affected versions include Tomcat 8.5.60–8.5.71, 9.0.40–9.0.53, 10.0.0-M1–10.0.11, and 10.1.0-M1–10.1.0-M5. Over time, this leak can lead to OutOfMe...

CVE-2022-24903

CVE-2022-24903 affects rsyslog TCP syslog reception modules, where heap-based overflow can occur when octet-counted framing is enabled. The root cause is that during parsing the octet count, digits are written to a heap buffer even if the count exceeds the maximum, allowing memory overrun; once t...