CVE-2019-11579

CVE-2019-11579 affects the dhcpcd DHCP client (dhcpcd) before 7.2.1. It is caused by a 1-byte read overflow in the DHO_OPTSOVERLOADED handling in dhcp.c. The documented remediation is to upgrade to version 7.2.1 or apply vendor patches that address this issue.

CVE-2018-13054

CVE-2018-13054 affects Cinnamon 1.9.2–3.8.6 where cinnamon-settings-users.py runs as root and can overwrite any user’s ~/.face via symlink pointing to an arbitrary location, enabling a possible privilege escalation. Connected advisories (openSUSE, Fedora, SUSE, Mageia, Ubuntu) report a fix for th...

CVE-2019-9972

The CVE-2019-9972 issue affects 3CX Phone System (Debian-based) version 16.0.0.1570, where an authenticated attacker can run arbitrary commands as the phonesystem user due to mishandling of a local input pattern: " followed by ". The vulnerability is a command injection in the PhoneSystem Termina...

CVE-2023-39949

CVE-2023-39949 affects eProsima Fast DDS, a C++ implementation of DDS. The issue is improper validation of sequence numbers in Fast DDS, which can lead to a remotely reachable assertion failure and remote crash of a Fast DDS process. The vulnerability exists in versions prior to 2.9.1 and 2.6.5; ...

CVE-2025-39701

Technical details for CVE-2025-39701 are not provided in the supplied documents. Monitor official kernel advisories for affected versions, impact, and remediation, as available information in connected sources is not detailed for this CVE.

CVE-2025-39813

CVE-2025-39813 concerns the Linux kernel ftrace subsystem. A race between ftrace_dump() and trace_pipe reads could trigger WARN_ON_ONCE in trace_printk_seq() when trace data is consumed by other readers, causing iter.seq to be mispopulated. The documented fix moves the trace_printk_seq() call ins...

CVE-2000-0107

The CVE-2000-0107 entry concerns the Linux apcd program, which is vulnerable to a local symlink attack that lets an authenticated local attacker modify arbitrary files. The root cause is improper handling of symlinks, enabling file overwrites via symlink manipulation. The available references con...

CVE-2000-0366

CVE-2000-0366 affects Debian GNU/Linux 2.1 where a dump utility fails to properly restore symlinks. This can allow a local user to modify ownership of arbitrary files due to incorrect handling of symbolic links during restoration. The core issue is the improper restoration of symlinks, enabling o...

CVE-2001-0233

CVE-2001-0233 affects the micq client (versions 0.4.6 and earlier). The vulnerability is a remote buffer overflow in the handling of a long Description field (via sprintf), allowing a remote attacker to cause a denial of service and possibly execute arbitrary code. Multiple connected sources (Deb...

CVE-2004-0770

CVE-2004-0770 affects romload.c in DGen Emulator 1.23 and earlier. The vulnerability arises during decompression of ROM files compressed with gzip or bzip, where a symlink attack on temporary files enables a local attacker to overwrite arbitrary files. Impact is local file overwrite; no exploit d...

CVE-2004-0964

CVE-2004-0964 concerns Zinf Audio Player. The available connected sources confirm a stack/buffer overflow vulnerability in Zinf Audio Player 2.2.1 (Windows) and older Linux builds triggered by crafted .pls files. Affected component: PLS file handling in Zinf; root cause: insufficient bounds check...

CVE-2011-0783

CVE-2011-0783 is a Google Chrome/Chromium vulnerability (before 9.0.597.84) described as an unspecified flaw that allows user-assisted remote attackers to cause a denial of service (application crash) via vectors involving a “bad volume setting.” Multiple OpenVAS/Debian entries corroborate Chrome...

CVE-2012-1096

CVE-2012-1096 affects NetworkManager 0.9 and earlier. The flaw allows local users to access other users’ certificates or private keys when establishing a connection via a file path during addition of a new connection. This is a local-attack exposure with a confidentiality impact reported as high ...

CVE-2012-6111

CVE-2012-6111 affects gnome-keyring: when gnome_keyring_lock_all_sync is used, stored secrets are not discarded. Public metrics indicate confidentiality impact (C: partial per CVSS2; C:H per CVSS3). No exploitation details are provided in the connected documents, and remediation details are not s...

CVE-2013-4584

CVE-2013-4584 affects Perdition before 2.2, where an error in handling outbound connections during STARTTLS for IMAP/POP causes ssl_outgoing_ciphers not to be applied. This results in weaker security for outbound connections; the literature does not provide exploit vectors, affected versions beyond

CVE-2014-2079

CVE-2014-2079 affects X File Explorer (xfe). The issue arises when creating new files on Samba or NFS shares: the user’s MASK is applied for permission settings instead of the share/server configuration, enabling local users to bypass intended access restrictions and potentially access arbitrary ...

CVE-2016-3992

CVE-2016-3992 affects cronic prior to version 3, enabling local users to write arbitrary files via a symlink attack against cronic.out.$$, cronic.err.$$, or cronic.trace.$$ in /tmp. Root cause: symlink manipulation in temporary files. Practical impact: local privilege or data tampering risk with ...

CVE-2018-19777

CVE-2018-19777 affects Artifex MuPDF 1.14.0, where an infinite loop in the function svg_dev_end_tile (fitz/svg-device.c) can be demonstrated by mutool. The connected sources confirm the vulnerable component and code path but do not provide detailed exploitation conditions beyond the loop example....

CVE-2018-7552

CVE-2018-7552 describes an invalid free in Mapping::DoubleHash::clear within sam2p 0.49.4 that can cause a segmentation fault. Public disclosures in multiple feeds (OSV, Debian DLA-1340-1, OSV-UBUNTU-CVE-2018-7552, NVD, and related entries) indicate this vulnerability may lead to denial of servic...

CVE-2019-11766

CVE-2019-11766 affects dhcpcd: dhcp6.c in dhcpcd before 6.11.7 and 7.x before 7.2.2 has a buffer over-read in the D6_OPTION_PD_EXCLUDE feature. Fixed in 6.11.7 and 7.2.2 (or later). Upgrade to a patched release to mitigate.

CVE-2025-38548

CVE-2025-38548 affects the Linux kernel hwmon driver for Corsair Corsair-CPro. The root cause is improper validation of the input buffer size received by the USB command path, allowing potential mismatches between the reported and actual buffer lengths. The fix, as documented in the connected Ast...

CVE-2025-38630

CVE-2025-38630 involves the Linux kernel fbdev imxfb driver. The issue arises when fb_add_videomode() returns -ENOMEM from internal kmalloc(), leaving the modelist empty but the driver still registers, risking a null pointer dereference. The patch adds a check on the return value to prevent this,...

CVE-2025-38664

The CVE-2025-38664 entry is a Linux kernel issue affecting the ice driver: a null pointer dereference in ice_copy_and_init_pkg() could occur if devm_kmemdup() returns NULL. The advisory notes a fix by adding a NULL check for the return value of devm_kmemdup() to prevent the dereference, with the ...

CVE-2025-39694

The CVE-2025-39694 entry concerns the Linux kernel component s390/sclp. The vulnerability arises from an improper NULL pointer check in the SCCB present check logic used during interrupt handling: the NULL check is performed after physical-to-virtual address translation, and if the kernel identit...

CVE-2025-39864

CVE-2025-39864 affects the Linux kernel wifi subsystem (cfg80211) and specifically the cmp_bss() path after a use-after-free in bss_free(). The fix, applied via commits addressing the hidden_beacon_bss handling, ensures the last beacon frame elements are freed only when not shared by the hidden_b...

CVE-1999-0742

Technical details such as affected versions, exploit vectors, or patches are not provided in the connected documents. The description notes weak authentication in Debian Mailman, so monitor for updates and official advisories.

CVE-1999-0914

CVE-1999-0914 describes a buffer overflow in the FTP client of the Debian GNU/Linux netstd package. The linked sources consistently identify the vulnerable component as the FTP client within netstd and cite a buffer overflow as the issue. The available records do not specify version ranges, affec...

CVE-2000-0888

The CVE-2000-0888 entry describes a DoS in ISC BIND 8.2–8.2.2-P6 when processing SRV records. Connected documents confirm the vulnerability in BIND’s SRV handling (the “srv bug”) and state that remote attackers can crash named by sending an SRV record. Impact is denial of service; vulnerable comp...

CVE-2001-1561

CVE-2001-1561 describes a buffer overflow in Xvt 2.1 on Debian Linux 2.2 that allows local users to execute arbitrary code via long (1) -name and (2) -T arguments. The issue stems from argument handling in xvt, enabling code execution with elevated privileges because xvt is installed setuid root....

CVE-2003-0648

CVE-2003-0648 concerns multiple buffer overflow vulnerabilities in vfte (a fork/variant of FTE) prior to version 0.50, enabling a local user to execute arbitrary code with the privileges of the FTE process. The Debian advisory and CERT entries describe issues in both environment variable handling...

CVE-2004-1093

CVE-2004-1093 affects Midnight Commander (mc) up to version 4.5.55. The issue is a memory-management vulnerability (use-after-free) that can cause a denial of service when a vulnerable file/operation triggers freeing of memory that is subsequently used. Public references in the provided documents...

CVE-2011-0474

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a flaw in handling CSS token sequences with cursors that can lead to a denial of service and possibly other impact via unknown vectors that produce a stale pointer. The provided documents identify the vulnerable sof...

CVE-2011-2515

PackageKit 0.6.17 is vulnerable to an issue where unsigned RPM packages are treated as signed, allowing installation of non-trusted packages and potential arbitrary code execution. Affected component: PackageKit 0.6.17. Root cause: unsigned RPMs accepted as signed, enabling local privilege or cod...

CVE-2012-0842

CVE-2012-0842 affects surf: the cookie jar can be read by a local user, enabling potential private cookie disclosure. The available documents describe the issue and its local access impact but do not provide exploitation details or remediation guidance.

CVE-2014-1935

The CVE-2014-1935 entry affects 9base versions 1:6-6 and 1:6-7, where temporary files are created insecurely, producing predictable filenames. Root cause and impact are described in the connected data; CVSS details from NVD indicate a base score of 5.3 (MEDIUM) for CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S...

CVE-2015-5727

CVE-2015-5727 affects Botan BER decoder. Multiple connected advisories (Debian DSA-3565, OpenVAS NASL) confirm the issue: the BER decoder could allocate a large amount of memory when processing a length field, enabling a denial of service through memory exhaustion. Affected: Botan 1.10.x before 1...

CVE-2017-9988

The CVE-2017-9988 entry affects Ming (libming) 0.4.8, where readEncUInt30 in util/read.c mishandles memory allocation, enabling a crafted input to cause a remote denial of service via a NULL pointer dereference in parser.c. Multiple downstream advisories (Fedora/Ming packages, Gentoo GLSA, Mageia...

CVE-2018-12601

CVE-2018-12601 : Concrete detail available — sam2p 0.49.4 has a heap-based buffer overflow in the ReadImage function of input-tga.ci, leading to denial of service or possibly other impact. Affected component is the ReadImage routine in sam2p’s TGA input handling; the vulnerability is triggered by...

CVE-2018-7553

CVE-2018-7553 affects sam2p 0.49.4 and is described in multiple sources as a heap-based buffer overflow in pcxLoadRaster (in_pcx.cpp). Exploitation could cause denial of service or unspecified other impact. The available connected reports corroborate the vulnerability in sam2p 0.49.4, but they do...

CVE-2018-7867

CVE-2018-7867 corresponds to a heap-based buffer overflow in libming 0.4.8, specifically in the getString function (util/decompile.c) during a RegisterNumber sprintf, leading to denial of service when given crafted input. The connected sources confirm this as part of a broader set of fixes for mi...

CVE-2018-7877

CVE-2018-7877 affects libming 0.4.8, specifically a heap-based buffer overflow in the getString function of util/decompile.c when processing DOUBLE data. A crafted input can cause a denial of service. Multiple sources (NVD entry and partner advisories) confirm the same flaw, but the provided docu...

CVE-2020-15472

CVE-2020-15472 affects ndpi (nDPI) up to version 3.2. The H.323 dissector contains a heap-based buffer over-read in ndpi_search_h323 (lib/protocols/h323.c) triggered by a payload with insufficient length, exposed over the network. Impact per sources ranges from Partial confidentiality/availabilit...

CVE-2020-15954

KDE KMail 19.12.3 (aka 5.13.3) is affected by CVE-2020-15954 due to defaulting to unencrypted POP3 communication even when the UI shows encryption. Concrete references in connected docs identify the affected package as KDE components (kdepim-runtime/kmail) and note that the issue was fixed in dis...

CVE-2023-0770

GPAC (gpac/gpac) CVE-2023-0770 targets the GPAC multimedia framework, with a stack-based buffer overflow in versions prior to 2.2. The issue is labeled HIGH severity: local attacker requires user interaction and could cause denial of service or potentially arbitrary code execution. Public exploit...

CVE-2023-39946

Summary: CVE-2023-39946 affects eProsima Fast DDS. Prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6, a heap overflow can be triggered by a PID_PROPERTY_LIST containing a crafted CDR string. In ParameterPropertyList_t::push_back_helper, the second memcpy can copy user-controlled data from the CD...

CVE-2025-38639

CVE-2025-38639 affects the Linux kernel netfilter xt_nfacct component. The issue is triggered by assuming the acct name is null-terminated, which can enable out-of-bounds reads. Multiple advisories note this is resolved by upgrading kernel versions; for example, Mariner/Mariner-like reports indic...

CVE-2025-38702

The CVE-2025-38702 entry concerns the Linux kernel fbdev subsystem. The issue is a potential buffer overflow in do_register_framebuffer() when unregistration creates NULL gaps in registered_fb[], when all slots become occupied despite num_registered_fb

CVE-2025-38721

CVE-2025-38721 affects the Linux kernel netfilter ctnetlink table dump path. A reference count leak in ctnetlink_dump_table() can occur if res ct_general) only when ct != last, and a cookie-based workaround is mentioned as an alternative. The Astra Linux bulletin confirms the same vulnerability i...

CVE-2025-38728

Technical details for CVE-2025-38728 are not publicly provided in the supplied documents. Monitor official advisories and vendor notices for updates.

CVE-2025-38732

CVE-2025-38732 refers to a Linux kernel vulnerability in netfilter nf_reject where loopback packets could cause a dst refcount leak. The issue arises from a patch that added a WARN during skb dst entry replacement but forgot that loopback packets already have a dst_entry attached (even at PRE_ROU...