CVE-2021-3671

CVE-2021-3671 is a NULL pointer dereference in Samba’s Kerberos server when a TGS-REQ is missing an sname, allowing an authenticated user to crash the Samba KDC and cause a denial of service. Public disclosures and advisories reference Samba/ Heimdal contexts and note that this affects Samba/Kerb...

CVE-2022-21296

CVE-2022-21296 affects Oracle Java SE (JAXP, Serialization, Libraries, 2D/Hotspot) and Oracle GraalVM Enterprise Edition. Affected Java SE versions: 7u321, 8u311, 11.0.13, 17.0.1; GraalVM EE: 20.3.4, 21.3.0. The issue allows unauthenticated, network-accessible exploitation that can lead to readin...

CVE-2023-41074

CVE-2023-41074 is a WebKit-related vulnerability where processing web content may lead to arbitrary code execution. Connected advisories confirm the issue across multiple platforms and ports, notably WebKit-on-Apple ecosystems (Safari/WebKit) and WebKitGTK+-based products. The root cause is descr...

CVE-2018-19788

Polkit (policykit) vulnerability CVE-2018-19788: improper handling of UIDs greater than INT_MAX allows an unprivileged user to execute systemctl commands, effectively bypassing authentication. This affects polkit 0.115 and earlier. Mitigations documented in multiple advisories recommend upgrading...

CVE-2019-3861

Summary: CVE-2019-3861 is an out-of-bounds read flaw in libssh2 before 1.8.1 related to parsing SSH packets with a padding length greater than the packet length. A remote attacker could cause a Denial of Service or read client memory. Affected software: libssh2 (client-side library) across multip...

CVE-2020-1946

CVE-2020-1946 affects Apache SpamAssassin prior to 3.4.5. Malicious rule configuration files (.cf) can be crafted to execute system commands without output or errors, enabling command execution in multiple scenarios. Root cause: untrusted .cf content can trigger privileged actions. Impact: potent...

CVE-2020-2659

CVE-2020-2659 affects Oracle Java SE/SE Embedded (Networking) with vulnerable openjdk7/8 builds (7u241, 8u231; Embedded 8u231). The issue is a networking component flaw in DatagramChannelImpl that could let an unauthenticated attacker cause a partial denial of service over the network. Several co...

CVE-2020-2755

CVE-2020-2755 is reported in the Oracle Java SE scripting component affecting Java SE 8u241, 11.0.6 and 14 (and Java SE Embedded 8u241). The vulnerability allows an unauthenticated attacker with network access to cause a partial denial of service in Java SE/Java SE Embedded. The CVSS base score i...

CVE-2021-30002

The CVE-2021-30002 issue affects the Linux kernel prior to 5.11.3. It is caused by a memory leak in video_usercopy inside drivers/media/v4l2-core/v4l2-ioctl.c when handling large webcam arguments. This memory leak can lead to memory exhaustion on affected systems. Connected advisories (e.g., Debi...

CVE-2021-3246

CVE-2021-3246 describes a heap buffer overflow in libsndfile’s msadpcm_decode_block (v1.0.30) that can allow arbitrary code execution through a crafted WAV file. Multiple connected advisories confirm the vulnerable component and affected library (libsndfile) and show vendor advisories for various...

CVE-2019-11486

The CVE-2019-11486 entry describes multiple race conditions in the Siemens R3964 line discipline driver (drivers/tty/n_r3964.c) of the Linux kernel, affecting versions before 5.0.8. This yields local exploitation potential with full confidentiality, integrity, and availability impact. A fix is av...

CVE-2019-20096

CVE-2019-20096 affects the Linux kernel before 5.1, where a memory leak in __feat_register_sp() (net/dccp/feat.c) can lead to denial of service. The Unity Linux Nessus advisories (UTSA-2026-003899/004383/000228) reference the same description block, confirming the issue and impact. No specific pa...

CVE-2022-21291

CVE-2022-21291 affects Oracle Java SE (Hotspot) and Oracle GraalVM Enterprise Edition. Affected versions include Oracle Java SE 7u321, 8u311, 11.0.13, 17.0.1 and GraalVM EE 20.3.4/21.3.0. It is exploitable over network via multiple protocols and can lead to unauthorized updates/deletes of data or...

CVE-2024-32021

CVE-2024-32021 affects Git prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. When cloning a local repository that contains symlinks over the filesystem, Git may create hardlinks to arbitrary user-readable files in the destination repo’s objects/ directory. Also, clonin...

CVE-2024-50602

The libexpat library before version 2.6.4 is vulnerable to a crash in the XML_ResumeParser function. The root cause is that XML_StopParser can stop or suspend a parser that has not yet started, leading to an improper check for unusual or exceptional conditions (CWE-754). This vulnerability can re...

CVE-2018-14633

CVE-2018-14633 affects the Linux kernel iSCSI target code, specifically chap_server_compute_md5(), where an unauthenticated remote attacker can trigger a stack-based buffer overflow, potentially causing a denial of service or exposing data from an iSCSI target. Public disclosures in 2018 indicate...

CVE-2019-13574

The CVE concerns MiniMagick before 4.9.4: in lib/mini_magick/image.rb, a fetched remote image filename could be passed directly to Kernel.open, with the leading ‘|’ indicating a shell command, enabling remote command execution. Connected advisories confirm the issue is a remote command execution ...

CVE-2019-14809

CVE-2019-14809 (Go): The issue arises in net/url parsing in Go before 1.11.13 and 1.12.x before 1.12.8, where malformed hosts in URLs can allow an authorization bypass by crafting a Host field suffix not present in Hostname() or Port(). Example: a javascript:// URL yielding a hostname like google...

CVE-2021-4002

CVE-2021-4002 describes a memory-leak flaw in the Linux kernel hugetlbfs memory usage caused by mappings being created twice (via shmget) for regions aligned to PUD, enabling a local user to access data that should be protected. The connected documents confirm this vulnerability across multiple L...

CVE-2022-26520

CVE-2022-26520 affects the PostgreSQL JDBC (PgJDBC) driver prior to 42.3.3. An attacker who controls the JDBC URL or properties can cause java.util.logging.FileHandler to write to arbitrary files via the loggerFile and loggerLevel properties, potentially enabling tasks like placing an executable ...

CVE-2015-9262

The CVE-2015-9262 issue affects the libXcursor library, where the function _XcursorThemeInherits in library.c allows a one-byte heap overflow in versions before 1.1.15. This could enable a remote attacker to cause a denial of service or potentially execute arbitrary code on affected systems. Publ...

CVE-2018-3149

CVE-2018-3149 affects Oracle Java SE family (Java SE, Java SE Embedded, JRockit) in the JNDI component, with vulnerable Java runtimes including Java 6u201, 7u191, 8u182 and 11; Java SE Embedded 8u181; JRockit R28.3.19. The root cause is within the Java components referenced (JNDI) and can allow a...

CVE-2020-27153

BlueZ (Bluetooth protocol stack) vulnerability CVE-2020-27153: a double-free in gatttool’s disconnect_cb() in shared/att.c can be exploited during service discovery to trigger denial of service or potentially arbitrary code execution. Affected: BlueZ versions before 5.55. Impact observed as DoS a...

CVE-2021-33813

CVE-2021-33813 concerns an XXE vulnerability in JDOM’s SAXBuilder up to version 2.0.6, allowing denial-of-service via a crafted HTTP request. Connected advisories confirm the issue affects jdom/jdom2 and list downstream fixes/upgrades in Linux distributions (e.g., Amazon Linux advisories ALAS2-20...

CVE-2021-3444

CVE-2021-3444 affects the Linux kernel’s eBPF verifier, where mod32 destination register truncation can be mishandled when the source is known to be zero. This enables a local attacker loading BPF programs to read kernel memory (information disclosure) and potentially perform out-of-bounds writes...

CVE-2021-42008

The CVE-2021-42008 entry concerns the Linux kernel 6pack driver (drivers/net/hamradio/6pack.c). It describes a slab out-of-bounds write in decode_data up to kernel versions before 5.13.13, enabling a local attacker with CAP_NET_ADMIN to achieve root access. Connected documents corroborate the aff...

CVE-2022-21663

CVE-2022-21663 affects WordPress (multisite) where users with Super Admin can bypass explicit hardening via object injection. The underlying issue is insufficient hardening in multisite configurations. The vulnerability has been patched in WordPress 5.8.3, and older affected versions are addresse...

CVE-2022-41218

CVE-2022-41218 is a Linux kernel use-after-free in the DVB core (drivers/media/dvb-core/dmxdev.c) caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release. The issue is local, with potential denial of service or privilege escalation as implied by downstream advisories. Public rec...

CVE-2022-45934

The CVE-2022-45934 issue affects the Linux kernel up to version 6.0.10, in the Bluetooth subsystem’s l2cap_config_req function (net/bluetooth/l2cap_core.c) where an integer wraparound can occur via L2CAP_CONF_REQ packets. The available connected documents confirm the root cause as an integer wrap...

CVE-2023-27932

CVE-2023-27932 affects WebKitGTK/WebKitGTK-based WebKit implementations (notably WebKit2GTK) and is a Same Origin Policy bypass via processing malicious web content. Public advisories in Debian, Fedora, and AlmaLinux confirm this CVE is fixed by updates to webkit2gtk/webkitgtk components (e.g., D...

CVE-2018-1120

CVE-2018-1120 affects the Linux kernel prior to 4.17. By mmap()ing a FUSE-backed file into a process’s memory that contains command line arguments or environment strings, a local attacker can cause utilities that read /proc//cmdline or /proc//environ (e.g., ps, w) to block indefinitely or for a b...

CVE-2018-1126

procps-ng (before version 3.3.15) is vulnerable to an integer size/overflow issue in file2strvec and wrappers for standard allocators (proc/alloc.*). Root cause: truncation/overflow in heap- or memory-related paths, enabling local privilege escalation or crashes. Affects procps utilities (ps/top/...

CVE-2018-2582

CVE-2018-2582 affects Oracle Java SE/OpenJDK (Hotspot) in Java SE 8u152, 9.0.1 and Java SE Embedded 8u151. The vulnerability occurs in the Hotspot/Libraries/AWT areas via network-accessible vectors, with unauthenticated remote exploitation and user interaction required for some attack paths. Publ...

CVE-2020-8265

The CVE-2020-8265 issue is a use-after-free in Node.js TLS handling that affects 10.x, 12.x, 14.x, and 15.x lines. The vulnerability arises when writing to a TLS-enabled socket: node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap; if DoWrite returns no error, t...

CVE-2021-20316

CVE-2021-20316 affects Samba: an authenticated attacker can read or modify share metadata due to a flaw in handling file/directory metadata, potentially enabling operations outside the intended share. Affected Samba versions exist in multiple OS packages; several connected advisories note that a ...

CVE-2021-29647

CVE-2021-29647 affects the Linux kernel (qrtr_recvmsg in net/qrtr/qrtr.c). The issue is an information disclosure via a partially uninitialized data structure, enabling a local attacker to read kernel memory. Root cause: partially uninitialized data in QRTR IPC router handling. Public references ...

CVE-2022-1353

CVE-2022-1353 — pfkey_register (net/key/af_key.c, Linux kernel) : A local, unprivileged user can gain access to kernel memory due to a flaw in pfkey_register. The vulnerability can lead to a system crash or leakage of internal kernel information. The Connected documents reference Linux kernel adv...

CVE-2022-1789

CVE-2022-1789 targets KVM in the Linux kernel. With shadow paging enabled, INVPCID can lead to a NULL pointer dereference when CR0.PG=0, because the invlpg callback is not set, causing a crash in kvm_mmu_invpcid_gva. The same issue is echoed in Astra Linux and AlmaLinux advisories, which list KVM...

CVE-2021-28652

CVE-2021-28652 concerns Squid before 4.15 and 5.x before 5.0.6. The issue stems from incorrect parser validation, allowing a Denial of Service attack against the Cache Manager API. A trusted client with Cache Manager API access can trigger memory leaks that, over time, lead to a DoS via an unspec...

CVE-2021-32675

CVE-2021-32675 affects Redis and is triggered by parsing Redis Standard Protocol (RESP) requests. An attacker can craft requests to cause Redis to allocate large amounts of memory across multiple connections, potentially impacting availability. The issue is tied to the RESP parsing path and authe...

CVE-2022-28390

CVE-2022-28390 is a Linux kernel vulnerability: a double-free in ems_usb_start_xmit() implemented in drivers/net/can/usb/ems_usb.c, affecting kernels up to 5.17.1. Connected advisories (Astra Linux, ALMAS/AL2, Debian DSA) reference this CVE and include it among kernel fixes; they indicate patchin...

CVE-2024-39494

CVE-2024-39494 – Linux kernel ima use-after-free on dentry name The flaw occurs in the IMA path where a dentry’s dname.name can be changed by a rename, and the previous value may be freed. The early value could be freed before a stable snapshot is taken because the locking conditions (dentry/d_lo...

CVE-2018-3058

The connected advisory entries substantiate CVE-2018-3058 as a real MySQL/MariaDB vulnerability affecting Oracle MySQL Server (MyISAM subcomponent) with affected 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior. The issue allows a low-privilege, network-access attacker via multiple protocols ...

CVE-2019-12521

CVE-2019-12521 is a Squid vulnerability where, while parsing ESI, the ESIContext buffer used to hold ESIElements is overflowed due to an off-by-one bug in addStackElement. The overflow is within the same structure and causes a crash during processing (not adjacent memory corruption). Affected: Sq...

CVE-2019-2816

CVE-2019-2816 affects Oracle Java SE/Java SE Embedded Networking and related components (Utilities) with affected Java SE versions 7u221, 8u212, 11.0.3, 12.0.1 and Java SE Embedded 8u211. IBM AIX security bulletin confirms CVSS 3.0 base score 4.8 (Network, High/AC:H, Privileges N, User Interactio...

CVE-2019-3882

CVE-2019-3882 affects the Linux kernel vfio interface: a local user owning a vfio device could abuse DMA mappings to memory and exhaust system memory, enabling a denial of service. Publicly available connected documents confirm the vulnerability and its DoS impact; Debian and other advisories inc...

CVE-2020-15707

CVE-2020-15707 is a GRUB2 bootloader vulnerability (initrd size handling) causing a heap-based buffer overflow via integer overflow in initrd processing. The flaw affects GRUB2 2.04 and earlier as deployed in multiple distros (Debian, Red Hat, Ubuntu) and can enable arbitrary code execution durin...

CVE-2020-36330

CVE-2020-36330 describes an out-of-bounds read in libwebp prior to version 1.0.1, triggered in the ChunkVerifyAndAssign function. The documented impact is data confidentiality loss and reduced availability. Public references in the Connected documents corroborate the flaw in libwebp and align wit...

CVE-2021-28153

GLib/GNOME GLib before 2.66.8 is affected by CVE-2021-28153: when g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it may create the target as an empty file. This behavior could be security-relevant if the symlink is attacker-controlled...

CVE-2021-31916

CVE-2021-31916 is a Linux kernel vulnerability in the device-mapper code (drivers/md/dm-ioctl.c, list_devices) causing an out-of-bounds memory write due to a bound check failure in kernels before 5.12. An attacker with CAP_SYS_ADMIN (local, no user interaction) can trigger a heap overrun, potenti...