CVE-2023-0770

GPAC (gpac/gpac) CVE-2023-0770 targets the GPAC multimedia framework, with a stack-based buffer overflow in versions prior to 2.2. The issue is labeled HIGH severity: local attacker requires user interaction and could cause denial of service or potentially arbitrary code execution. Public exploit...

CVE-2025-38529

CVE-2025-38529 relates to the Linux kernel Comedi driver (aio_iiro_16) where an unchecked userspace-derived value in it->options[1] could cause a shift out of bounds or negative shift; the fix adds a bounds check on it->options[1] before evaluating the (1 <options[1]) & 0xdcfc test. Affe...

CVE-2025-38548

CVE-2025-38548 affects the Linux kernel hwmon driver for Corsair Corsair-CPro. The root cause is improper validation of the input buffer size received by the USB command path, allowing potential mismatches between the reported and actual buffer lengths. The fix, as documented in the connected Ast...

CVE-2025-38725

CVE-2025-38725 affects the Linux kernel net: usb: asix_devices driver handling of ax88772 MDIO bus. Without a phy_mask, the driver could create up to 32 MDIO phy devices (addresses 0x00–0x1f). Only one main phy binds to the net phy driver, causing issues during suspend/resume where phy_polling_mo...

CVE-2025-38727

Linux kernel vulnerability CVE-2025-38727 affects netlink in the Linux kernel. A bug in netlink_attachskb() may cause an infinite retry loop when memory checks for skb->truesize against sk_rcvbuf are inconclusive (rmem + skb->truesize > sk_rcvbuf), potentially triggering an rcu_sched sta...

CVE-2000-0076

Summary: CVE-2000-0076 affects the nviboot boot script in the Debian nvi package. Local users can delete files through malformed entries in vi.recover. The available records confirm the affected component (nviboot in Debian nvi), the underlying cause (malformed vi.recover entries) and the impact ...

CVE-2000-1135

CVE-2000-1135 describes a local privilege issue in the fshd (fsh daemon) on Debian GNU/Linux. The vulnerability allows a local user to overwrite files belonging to other users via a symbolic link (symlink) attack. The impact is partial confidentiality, integrity, and availability due to the abili...

CVE-2006-1564

The CVE-2006-1564 entry concerns libapache2-svn 1.3.0-4 for Subversion on Debian GNU/Linux. The vulnerability stems from untrusted search paths due to RPATH values under /tmp/svn for the (1) mod_authz_svn.so and (2) mod_dav_svn.so modules, potentially allowing local users to gain privileges by pl...

CVE-2010-2450

CVE-2010-2450 affects Shibboleth SP 2.0. The keygen.sh utility (in /usr/local/etc/shibboleth by default) uses OpenSSL to generate a DES private key and saves it to sp-key.pm with the process’s root umask (default 022). This results in the private key file being world-readable by default, exposing...

CVE-2011-1070

CVE-2011-1070 involves v86d (before 0.1.10) failing to verify that netlink messages originate from the kernel. This can allow a local, unprivileged attacker to manipulate the video mode and potentially other consequences. Remediation per connected entries is to upgrade to v86d 0.1.10 or newer (pa...

CVE-2012-6639

CVE-2012-6639 describes a privilege-elevation vulnerability in Cloud-init prior to 0.7.0. The issue occurs when requests to an untrusted system are made for EC2 instance data, allowing an attacker with network access to leverage low-privileged execution to gain higher privileges. The available co...

CVE-2014-10073

Psensor is affected by a directory traversal in the create_response function of server/server.c prior to version 1.1.4, allowing access to files under the webserver directory. This stems from a missing check that verifies a requested path is under the webserver root. The vulnerability impacts Pse...

CVE-2018-19777

CVE-2018-19777 affects Artifex MuPDF 1.14.0, where an infinite loop in the function svg_dev_end_tile (fitz/svg-device.c) can be demonstrated by mutool. The connected sources confirm the vulnerable component and code path but do not provide detailed exploitation conditions beyond the loop example....

CVE-2025-38542

CVE-2025-38542 affects the Linux kernel net:appletalk code. The vulnerability is a device refcount leak in atrtr_create(): during route entry updates, the old device reference was not released before assigning the new one, leading to a leak. The fix releases the old reference with dev_put() befor...

CVE-2025-38581

CVE-2025-38581 affects the Linux kernel crypto CCP driver. When CONFIG_CRYPTO_DEV_CCP_DEBUGFS is enabled, rebinding the CCP device could crash the kernel due to a NULL-dereference in debugfs setup. The connected Unity Linux/UTSA advisory notes a patch that fixes this by setting ccp_debugfs_dir to...

CVE-2025-38630

CVE-2025-38630 involves the Linux kernel fbdev imxfb driver. The issue arises when fb_add_videomode() returns -ENOMEM from internal kmalloc(), leaving the modelist empty but the driver still registers, risking a null pointer dereference. The patch adds a check on the return value to prevent this,...

CVE-2025-38639

CVE-2025-38639 affects the Linux kernel netfilter xt_nfacct component. The issue is triggered by assuming the acct name is null-terminated, which can enable out-of-bounds reads. Multiple advisories note this is resolved by upgrading kernel versions; for example, Mariner/Mariner-like reports indic...

CVE-2025-39819

CVE-2025-39819 affects the Linux kernel (fs/smb). The issue is an inconsistent refcount update in smb2_compound_op that could leak resources; a fix adds an extra cleanup goto to ensure cfile is dropped on all paths, including ENOMEM paths. The problem is limited to the kernel SMB path and is miti...

CVE-1999-0341

The CVE-1999-0341 entry describes a buffer overflow in the Linux mail program “deliver” that allows local users to gain root access. The connected documents confirm the affected component is the Linux mail utility deliver and identify the root cause as a buffer overflow, leading to privilege esca...

CVE-1999-1276

The CVE-1999-1276 entry describes a local privilege escalation in fte-console: before 0.46b-4.1 it does not drop root privileges, allowing local users to gain root via the virtual console device. Affected: fte-package fte-console. Impact per CVSS: complete impact to confidentiality, integrity, an...

CVE-2001-0738

The CVE-2001-0738 issue affects the Linux kernel logging daemon klogd (sysklogd 1.3) across various distributions. A NULL byte in log messages can cause klogd to enter an infinite loop and hang, effectively a denial-of-service. Root cause cited is klogd’s LogLine handling of NULL bytes in input. ...

CVE-2001-0755

CVE-2001-0755 concerns a buffer overflow in the ftp daemon (ftpd) 6.2 used in Debian GNU/Linux. The vulnerability allows a remote attacker to trigger a denial of service and potentially execute arbitrary code by sending a long SITE command. The available connected sources confirm the affected com...

CVE-2002-0401

The CVE-2002-0401 issue affects Ethereal SMB dissector: versions 0.9.3 and earlier are vulnerable to remote denial of service or arbitrary code execution due to a NULL pointer dereference when handling malformed SMB packets. Connected sources confirm the flaw and indicate remediation by upgrading...

CVE-2006-1565

The CVE-2006-1565 entry concerns an untrusted search path (RPATH) vulnerability in libgpib-perl 3.2.06-2 on Debian GNU/Linux. The LinuxGpib.so module includes an RPATH value under /tmp/buildd, which could allow a local attacker to gain privileges by placing malicious libraries in that directory t...

CVE-2010-3359

CVE-2010-3359 affects gargoyle-free prior to 2009-08-25: if LD_LIBRARY_PATH is undefined, it may point to the current directory, allowing a local user to trick another user into executing gargoyle in a directory containing a cracked libgarglk.so and gain access to the user's account. The connecte...

CVE-2011-2207

The entries for CVE-2011-2207 document a vulnerability in dirmngr prior to version 2.1.0 where certain system calls are improperly handled, allowing remote attackers to cause a denial of service via a specially-crafted certificate. Affected component: dirmngr (before 2.1.0). Root cause is describ...

CVE-2011-3618

CVE-2011-3618 relates to a symlink attack caused by insecure tempfile handling in the tool described as “atop.” The linked records (NVD, OSV, Debian/Ubuntu trackers and others) consistently cite this issue as a local‑attack vulnerability with insecure tempfile handling, leading to potential expos...

CVE-2012-2248

CVE-2012-2248 affects dhclient 4.3.1-6 due to an embedded path variable, described across multiple sources as a path traversal issue. The available connected documents consistently identify the problem as a vulnerability in the dhclient component, but do not provide concrete exploitation steps, a...

CVE-2018-7551

CVE-2018-7551: There is an invalid free in MiniPS::delete0 in minips.cpp causing a segmentation fault in sam2p 0.49.4. A crafted input may lead to denial of service or unspecified other impact. This vulnerability is documented across multiple sources (NVD, OSV, Mageia, Debian NASL/OpenVAS records...

CVE-2018-7552

CVE-2018-7552 describes an invalid free in Mapping::DoubleHash::clear within sam2p 0.49.4 that can cause a segmentation fault. Public disclosures in multiple feeds (OSV, Debian DLA-1340-1, OSV-UBUNTU-CVE-2018-7552, NVD, and related entries) indicate this vulnerability may lead to denial of servic...

CVE-2024-58240

The CVE-2024-58240 entry concerns the Linux kernel TLS path, specifically separating no-async decryption request handling from async flow. The described issue centers on a race in the TLS decryption handling (no-async vs async) and notes that a prior patch (aec7961916f3) addressed a UAF risk rela...

CVE-2025-38520

In CVE-2025-38520, the Linux kernel’s DRM/AMDKFD path could deadlock during MMU notifier callbacks when a process exits, potentially leaking VRAM. The root cause was calling mmput from the MMU notifier callback, risking release of the mm struct and exit_mmap/free_pgtable. The fix takes a non-zero...

CVE-2025-38685

CVE-2025-38685 affects the Linux kernel fbdev path. The issue arises in vmalloc out-of-bounds write within fast_imageblit when a userspace ioctl (FBIOPUT_CON2FBMAP) maps a console to a framebuffer; if the console resize during mapping fails but the code continues, it can end up updating display s...

CVE-2001-0430

The CVE-2001-0430 entry refers to a vulnerability in exuberant-ctags prior to version 3.2.4-0.1 where temporary files are created insecurely, leading to potential local file exposure or corruption. Public sources in the connected documents confirm the issue and identify the Debian package update ...

CVE-2001-0457

CVE-2001-0457 affects man2html prior to 1.5-22. The Debian security advisory DSA-035-1 and OpenVAS entries warn that remote attackers could trigger a denial of service via memory exhaustion. A patch/update to the affected man2html package is the indicated remediation. The OpenVAS NASL notes the i...

CVE-2018-7554

CVE-2018-7554 refers to sam2p, where an invalid free in ReadImage (input-bmp.ci) can cause a segmentation fault in sam2p 0.49.4. A crafted input may lead to a denial of service or possibly other unspecified impact. The connected documents corroborate the vulnerability description but do not provi...

CVE-2025-38728

Technical details for CVE-2025-38728 are not publicly provided in the supplied documents. Monitor official advisories and vendor notices for updates.

CVE-2025-39824

The CVE CVE-2025-39824 affects the Linux kernel HID subsystem. A crafted HID descriptor can trigger a use-after-free in hid_input handling during hidinput_connect() after hid_hw_start(), notably via ASUS HID devices (e.g., ASUS ROG N-Key keyboard). The root cause is that capability bitmaps may no...

CVE-2026-56968

CVE-2026-56968 affects GNU SASL versions prior to 2.2.4. The NTLM client’s short challenge in the function _gsasl_ntlm_client_step has inadequate sanitization, which can lead to memory disclosure when interacting with a crafted server. Public sources (SUSE, Debian OSV, Ubuntu/Ubuntu-related advis...

CVE-1999-0939

Technical details about CVE-1999-0939 are not provided in the supplied documents; monitor for updates.

CVE-1999-1048

CVE-1999-1048 affects Bash versions including 2.0.0 and 1.4.17, where a buffer overflow can be triggered by an extremely large directory name. The vulnerability is exploited via the PS1 prompt (\w) when another user changes into that directory, enabling local privilege escalation. The provided do...

CVE-2000-0584

CVE-2000-0584 affects the Canna input service. The vulnerability is a buffer overflow in the SR_INIT handling that can occur when a long user name or group name is supplied, enabling a remote attacker to crash the service and may allow arbitrary code execution. The issue is documented across mult...

CVE-2006-4245

CVE-2006-4245 affects archivemail 0.6.2, which insecurely uses temporary files, creating a possible race condition. Fixed in later packages (e.g., archivemail-0.9.0-9.2 on openSUSE GA media); upgrade recommended. If upgrading not available, consult vendor advisories. Exploitation status not provi...

CVE-2011-1136

CVE-2011-1136 affects tesseract versions 2.03 and 2.04. The issue enables a local attacker to rewrite an arbitrary user file by guessing a process ID and creating a link to the user’s file, indicating a local-privilege-like impact with integrity risk. The connected documents corroborate the descr...

CVE-2012-0051

Technical details about CVE-2012-0051 are not publicly provided in the supplied connected documents. Monitor for updates from vendors and security advisories.

CVE-2013-1809

CVE-2013-1809 affects Gambas before 3.4.0. The issue arises from insecure temporary directories, allowing remote attackers to move or manipulate directory contents or perform symlink attacks. This is documented across multiple sources (NVD entry and related advisories). The provided materials des...

CVE-2018-7874

The CVE-2018-7874 entry concerns an invalid memory address dereference in strlenext (util/decompile.c) of libming 0.4.8, causing a segmentation fault and a denial of service. The provided documents confirm the vulnerable component and the crash-inducing root cause but do not include details on af...

CVE-2025-38510

The CVE-2025-38510 issue in the Linux kernel is about the KASAN memory debugger. The fix removes kasan_find_vm_area() to avoid deadlocks during KASAN reporting when find_vm_area() would be called in an atomic_context. The vulnerability stemmed from a potential deadlock between kernel VM area repo...

CVE-2025-38530

CVE-2025-38530 relates to the Linux kernel’s Comedi pcl812 code. The vulnerability arises from a test that shifts a constant with a user-supplied option: (1 <options[1]) & board->irq_bits. Since it->options[1] is unchecked from userspace, the shift amount can be negative or out of bounds...

CVE-2025-38535

CVE-2025-38535 relates to the Linux kernel on Tegra XUSB where regulator disable logic became unbalanced when leaving USB_ROLE_DEVICE. The fix moves regulator control into tegra186_xusb_padctl_id_override() and disables the regulator only when transitioning from USB_ROLE_HOST to USB_ROLE_NONE aft...