CVE-2019-20382

Summary of CVE-2019-20382 (mode C) QEMU 4.1.0 is affected by a memory leak in zrle_compress_data (ui/vnc-enc-zrle.c) during a VNC disconnect. The leak is due to incorrect use of libz, where memory allocated in deflateInit2 may not be freed by deflateEnd. This leads to a leak of allocated memory o...

CVE-2019-5782

CVE-2019-5782 is a Chrome/V8 vulnerability in TurboFan’s typer module where an incorrect type inference for arguments.length causes BCE to elide a bounds check, enabling out-of-bounds access and, per the Connected documents, reliable code execution. The CVE targeted Chrome versions around 63–72, ...

CVE-2021-39151

CVE-2021-39151 is part of a family of vulnerabilities in XStream, a Java library used for XML serialization. The connected documents confirm that, in affected versions, an attacker can load and execute arbitrary code on a remote host by manipulating the processed input stream, with no user intera...

CVE-2022-21305

CVE-2022-21305 is present across multiple Oracle Java SE and GraalVM Enterprise Edition components (Hotspot, Serialization, JAXP, ImageIO, Libraries, 2D/3D) affecting Java versions 7u321, 8u311, 11.0.13, 17.0.1 (and GraalVM EE 20.3.4/21.3.0). Public advisories describe unauthenticated network-bas...

CVE-2022-47929

CVE-2022-47929 is a Linux kernel vulnerability: a NULL pointer dereference in the traffic control subsystem (affecting qdisc_graft in net/sched/sch_api.c) that allows an unprivileged user to trigger a denial of service (system crash) via crafted tc qdisc/class configurations. Exploitation is loca...

CVE-2017-6074

CVE-2017-6074 affects the Linux kernel up to 4.9.11, where dccp_rcv_state_process in net/dccp/input.c mishandles DCCP_PKT_REQUEST data in LISTEN state. This can allow a local user to gain root privileges or trigger a denial of service (double free) via an application using IPV6_RECVPKTINFO setsoc...

CVE-2021-22890

CVE-2021-22890 affects curl 7.63.0 through 7.75.0. When using TLS 1.3 with an HTTPS proxy, libcurl could confuse TLS session tickets from the proxy as if they came from the remote server, potentially causing the host’s session ticket to be resumed incorrectly and bypass server certificate checks,...

CVE-2021-3759

CVE-2021-3759 is a memory overflow in the Linux kernel memcg IPC path, where repeated semget calls by a local user can exhaust memory and cause a denial of service. Public docs confirm impact is local and availability-focused. Debian LTS advisory DLA-3244-1 and Amazon ALAS2KERNEL advisories for k...

CVE-2023-2156

CVE-2023-2156 is a Linux kernel networking flaw in the RPL protocol handling that stems from improper processing of user-supplied data. The description in the initial document states that an unauthenticated remote attacker could cause a denial of service by triggering an assertion failure. Connec...

CVE-2018-6360

mpv = 0.27.1, Mageia citing 0.27.2+, and Alpine noting vulnerability up to 0.28.0). If exploitation details are not provided in a document, they are not assumed; rely on the stated fixes.

CVE-2019-13115

CVE-2019-13115 affects libssh2 prior to 1.9.0, where kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c can overflow an integer, leading to an out-of-bounds read when processing server packets. The vulnerability could allow a remote attacker controlling a SSH server to disclose...

CVE-2019-2894

CVE-2019-2894 affects Oracle Java SE/OpenJDK components (Security) in Java SE 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Impact: allows an unauthenticated attacker over the network to read a subset of data in Java SE/Embedded. Public advisories confirm this CVE is being addressed in mu...

CVE-2020-25638

CVE-2020-25638 affects Hibernate ORM (hibernate-core) up to 5.4.23.Final, with a SQL injection in the JPA Criteria API where unsanitized literals can be injected via query SQL comments. Impact described as confidentiality and integrity risk; exploitation could allow access to unauthorized data an...

CVE-2022-32206

CVE-2022-32206 affects curl

CVE-2023-45145

CVE-2023-45145 affects Redis: on startup Redis opens a Unix socket before applying configured permissions, enabling a brief race condition if umask is permissive. The issue has been fixed in Redis 7.2.2, 7.0.14, and 6.2.14. Connected advisories (Astra Linux, Amazon Linux variants, Debian DLA) cor...

CVE-2017-15098

CVE-2017-15098 affects PostgreSQL: invalid json_populate_recordset/jsonb_populate_recordset can crash the server or disclose memory. Impact is a DoS and potential memory disclosure. Affected versions include PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15...

CVE-2018-10853

CVE-2018-10853: A security flaw in the Linux kernel KVM hypervisor (pre-4.18) where emulation of certain unprivileged instructions (sgdt, sidt, fxsave, fxrstor) did not check CPL, potentially allowing an unprivileged guest process to escalate privileges inside the guest. The CVE is linked to comm...

CVE-2018-18506

CVE-2018-18506 is a PAC-related issue where a PAC file can cause localhost requests to be proxied. Connected documents confirm Thunderbird is affected and publicly patched: Thunderbird 60.6.1 fixes were released across AL2 (ALAS2-2019-1195), CentOS/RHEL advisories (RHSA-2019:0680/0681), and Debia...

CVE-2019-20096

CVE-2019-20096 affects the Linux kernel before 5.1, where a memory leak in __feat_register_sp() (net/dccp/feat.c) can lead to denial of service. The Unity Linux Nessus advisories (UTSA-2026-003899/004383/000228) reference the same description block, confirming the issue and impact. No specific pa...

CVE-2020-12662

CVE-2020-12662 affects the Unbound DNS resolver. Upstream, the issue is a network amplification (NXNSAttack) vulnerability triggered by random subdomains in NS records, with Unbound versions before 1.10.1 identified as vulnerable. Connected advisories note that Red Hat Enterprise Linux 7 received...

CVE-2020-8037

CVE-2020-8037 affects tcpdump’s ppp decapsulator and can cause unbounded memory allocation, leading to DoS. Public documents corroborate that tcpdump 4.9.3 and later patch levels address this issue by upgrading the tcpdump package (e.g., 4.9.3-3 in some distributions; Ubuntu/Debian updates list 4...

CVE-2022-0854

CVE-2022-0854 is a memory leak flaw in the Linux kernel DMA subsystem (DMA_FROM_DEVICE) that could allow a local authenticated attacker to read random kernel memory, exposing data. The IBM Security Bulletin for IBM Storage Scale System lists CVE-2022-0854 among Linux kernel DMA swiotlb-related is...

CVE-2022-32208

CVE-2022-32208 affects curl when performing FTP transfers secured by krb5 prior to version 7.84.0. The vulnerability arises from how message verification failures are handled during krb5-secured FTP transfers, enabling a man-in-the-middle to go unnoticed and potentially inject data to the client....

CVE-2023-34151

CVE-2023-34151 affects ImageMagick. The issue is an undefined behavior caused by casting double to size_t in SVG, MVG, and other coders, leading to vulnerability exposure. Public references document multiple advisories confirming patches across distributions (e.g., Debian DSA-5628-1 and DLA-3737-...

CVE-2018-1000802

CVE-2018-1000802 affects CPython 2.7, where shutil.make_archive is vulnerable to command injection. A specially crafted input to the function can lead to Denial of Service and potential information gain via arbitrary file creation, as described in multiple advisories. The issue stems from imprope...

CVE-2018-19788

Polkit (policykit) vulnerability CVE-2018-19788: improper handling of UIDs greater than INT_MAX allows an unprivileged user to execute systemctl commands, effectively bypassing authentication. This affects polkit 0.115 and earlier. Mitigations documented in multiple advisories recommend upgrading...

CVE-2021-3671

CVE-2021-3671 is a NULL pointer dereference in Samba’s Kerberos server when a TGS-REQ is missing an sname, allowing an authenticated user to crash the Samba KDC and cause a denial of service. Public disclosures and advisories reference Samba/ Heimdal contexts and note that this affects Samba/Kerb...

CVE-2024-21068

CVE-2024-21068 affects Oracle Java SE Hotspot (and related GraalVM/JavaFX components) across multiple supported JDK/OpenJDK lines. Affected versions include 8u401, 11.0.22, 17.0.10, 21.0.2, 22 (and GraalVM JDK 17.0.10/21.0.2/22; EE 21.3.9). Impact is unauthenticated remote compromise with possibl...

CVE-2018-1128

CVE-2018-1128 describes a replay vulnerability in the Cephx authentication protocol where a packet sniffer on a Ceph cluster network can authenticate to Ceph services due to insufficient verification of clients. The issue affects the msgr2 protocol (used by most Ceph communication) and can compro...

CVE-2019-14809

CVE-2019-14809 (Go): The issue arises in net/url parsing in Go before 1.11.13 and 1.12.x before 1.12.8, where malformed hosts in URLs can allow an authorization bypass by crafting a Host field suffix not present in Hostname() or Port(). Example: a javascript:// URL yielding a hostname like google...

CVE-2019-3861

Summary: CVE-2019-3861 is an out-of-bounds read flaw in libssh2 before 1.8.1 related to parsing SSH packets with a padding length greater than the packet length. A remote attacker could cause a Denial of Service or read client memory. Affected software: libssh2 (client-side library) across multip...

CVE-2021-46828

CVE-2021-46828 – libtirpc is linked to a DoS in the RPC library where idle TCP connections are mishandled. This can exhaust a process’s file descriptors and cause an svc_run loop that stops accepting new connections. The vulnerability is tied to libtirpc versions before 1.3.3rc1. A fix is availab...

CVE-2023-4430

CVE-2023-4430 is a use-after-free in Vulkan within Google Chrome/Chromium prior to 116.0.5845.110, enabling remote heap corruption via a crafted HTML page. Affected: Chrome/Chromium; root cause: use-after-free in Vulkan handling. Impact: high (remote code execution risk, heap corruption). Remedia...

CVE-2017-13079

CVE-2017-13079 is a KRACK-type vulnerability affecting WPA/WPA2 where reinstallation of the Integrity Group Temporal Key (IGTK) can occur during the 4-way handshake. An attacker in radio range can spoof frames from APs to clients by exploiting IGTK reinstallation. Public disclosures and advisorie...

CVE-2018-19662

CVE-2018-19662 affects the libsndfile library (version 1.0.28) with a buffer over-read in the i2alaw_array function in alaw.c, leading to denial of service. Connected advisories confirm an upgraded/updated libsndfile release resolves the issue (e.g., enterprise/Linux distro advisories; Debian/Red...

CVE-2020-16092

CVE-2020-16092 affects QEMU up to 5.0.0, specifically the network packet processing path. The vulnerability is an assertion failure in net_tx_pkt_add_raw_fragment() within hw/net/net_tx_pkt.c, impacting the e1000e and vmxnet3 devices. A malicious guest user/process could trigger this assertion to...

CVE-2020-1946

CVE-2020-1946 affects Apache SpamAssassin prior to 3.4.5. Malicious rule configuration files (.cf) can be crafted to execute system commands without output or errors, enabling command execution in multiple scenarios. Root cause: untrusted .cf content can trigger privileged actions. Impact: potent...

CVE-2020-2805

CVE-2020-2805 is an OpenJDK/OpenJDK Libraries issue. The connected Chainguard entry states the flaw resides in the readObject() method of the MethodType class within the Libraries component of OpenJDK, which can allow an untrusted Java applet or application to bypass Java sandbox restrictions. Th...

CVE-2021-3444

CVE-2021-3444 affects the Linux kernel’s eBPF verifier, where mod32 destination register truncation can be mishandled when the source is known to be zero. This enables a local attacker loading BPF programs to read kernel memory (information disclosure) and potentially perform out-of-bounds writes...

CVE-2021-4156

CVE-2021-4156 affects libsndfile’s FLAC codec, with an out-of-bounds read that can crash an application and potentially leak memory. Multiple advisories confirm vulnerable versions and fix versions across distributions: Debian LTS fixes in 1.0.28-6+deb10u2; Amazon Linux 2023 updates to 1.0.31-6.a...

CVE-2023-41074

CVE-2023-41074 is a WebKit-related vulnerability where processing web content may lead to arbitrary code execution. Connected advisories confirm the issue across multiple platforms and ports, notably WebKit-on-Apple ecosystems (Safari/WebKit) and WebKitGTK+-based products. The root cause is descr...

CVE-2017-13080

CVE-2017-13080 corresponds to the WPA2/Wi‑Fi Key Reinstallation Attack (KRACK) risk, where a network-adjacent attacker can leverage a flaw in the group key handshake to reinstall GTK keys and replay frames. The core description in the initial document confirms: an attacker in radio range can repl...

CVE-2018-5146

CVE-2018-5146 describes an out-of-bounds memory write in Vorbis audio data processing. Affected are Mozilla Firefox (<59.0.1), Firefox ESR (<52.7.2), and Thunderbird (

CVE-2019-13750

CVE-2019-13750 affects Google Chrome (Chromium) where the SQLite component used by Chrome allowed insufficient data validation, enabling a remote attacker to bypass defense-in-depth via a crafted HTML page. Affected product: Chrome/Chromium with the SQLite library integrated; root cause: data val...

CVE-2022-1789

CVE-2022-1789 targets KVM in the Linux kernel. With shadow paging enabled, INVPCID can lead to a NULL pointer dereference when CR0.PG=0, because the invlpg callback is not set, causing a crash in kvm_mmu_invpcid_gva. The same issue is echoed in Astra Linux and AlmaLinux advisories, which list KVM...

CVE-2022-21293

CVE-2022-21293 affects Oracle Java SE (Libraries) and Oracle GraalVM Enterprise Edition as listed: Java SE 7u321, 8u311, 11.0.13, 17.0.1; GraalVM EE 20.3.4 and 21.3.0. The issue allows unauthenticated network-based exploitation via multiple protocols, potentially enabling a partial denial of serv...

CVE-2022-26520

CVE-2022-26520 affects the PostgreSQL JDBC (PgJDBC) driver prior to 42.3.3. An attacker who controls the JDBC URL or properties can cause java.util.logging.FileHandler to write to arbitrary files via the loggerFile and loggerLevel properties, potentially enabling tasks like placing an executable ...

CVE-2018-1120

CVE-2018-1120 affects the Linux kernel prior to 4.17. By mmap()ing a FUSE-backed file into a process’s memory that contains command line arguments or environment strings, a local attacker can cause utilities that read /proc//cmdline or /proc//environ (e.g., ps, w) to block indefinitely or for a b...

CVE-2018-1126

procps-ng (before version 3.3.15) is vulnerable to an integer size/overflow issue in file2strvec and wrappers for standard allocators (proc/alloc.*). Root cause: truncation/overflow in heap- or memory-related paths, enabling local privilege escalation or crashes. Affects procps utilities (ps/top/...

CVE-2020-2755

CVE-2020-2755 is reported in the Oracle Java SE scripting component affecting Java SE 8u241, 11.0.6 and 14 (and Java SE Embedded 8u241). The vulnerability allows an unauthenticated attacker with network access to cause a partial denial of service in Java SE/Java SE Embedded. The CVSS base score i...