CVE-2020-2755

CVE-2020-2755 is reported in the Oracle Java SE scripting component affecting Java SE 8u241, 11.0.6 and 14 (and Java SE Embedded 8u241). The vulnerability allows an unauthenticated attacker with network access to cause a partial denial of service in Java SE/Java SE Embedded. The CVSS base score i...

CVE-2020-8698

CVE-2020-8698 is an information-disclosure vulnerability in Intel microcode affecting shared-resource isolation. An authenticated local attacker could disclose data via RAPL/isolation weaknesses. Public detail confirms affected Intel processors and that mitigations are microcode updates released ...

CVE-2021-29647

CVE-2021-29647 affects the Linux kernel (qrtr_recvmsg in net/qrtr/qrtr.c). The issue is an information disclosure via a partially uninitialized data structure, enabling a local attacker to read kernel memory. Root cause: partially uninitialized data in QRTR IPC router handling. Public references ...

CVE-2021-30002

The CVE-2021-30002 issue affects the Linux kernel prior to 5.11.3. It is caused by a memory leak in video_usercopy inside drivers/media/v4l2-core/v4l2-ioctl.c when handling large webcam arguments. This memory leak can lead to memory exhaustion on affected systems. Connected advisories (e.g., Debi...

CVE-2022-1353

CVE-2022-1353 — pfkey_register (net/key/af_key.c, Linux kernel) : A local, unprivileged user can gain access to kernel memory due to a flaw in pfkey_register. The vulnerability can lead to a system crash or leakage of internal kernel information. The Connected documents reference Linux kernel adv...

CVE-2022-41218

CVE-2022-41218 is a Linux kernel use-after-free in the DVB core (drivers/media/dvb-core/dmxdev.c) caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release. The issue is local, with potential denial of service or privilege escalation as implied by downstream advisories. Public rec...

CVE-2015-9262

The CVE-2015-9262 issue affects the libXcursor library, where the function _XcursorThemeInherits in library.c allows a one-byte heap overflow in versions before 1.1.15. This could enable a remote attacker to cause a denial of service or potentially execute arbitrary code on affected systems. Publ...

CVE-2018-14633

CVE-2018-14633 affects the Linux kernel iSCSI target code, specifically chap_server_compute_md5(), where an unauthenticated remote attacker can trigger a stack-based buffer overflow, potentially causing a denial of service or exposing data from an iSCSI target. Public disclosures in 2018 indicate...

CVE-2019-12973

Context: CVE-2019-12973 affects OpenJPEG 2.3.1. Vulnerability: In opj_t1_encode_cblks (openjp2/t1.c), excessive iteration can be exploited by a crafted BMP file to cause a denial of service. This is consistent with related issues in OpenJPEG’s t1.c handling. Impact (as stated): Remote denial of s...

CVE-2019-13574

The CVE concerns MiniMagick before 4.9.4: in lib/mini_magick/image.rb, a fetched remote image filename could be passed directly to Kernel.open, with the leading ‘|’ indicating a shell command, enabling remote command execution. Connected advisories confirm the issue is a remote command execution ...

CVE-2020-2659

CVE-2020-2659 affects Oracle Java SE/SE Embedded (Networking) with vulnerable openjdk7/8 builds (7u241, 8u231; Embedded 8u231). The issue is a networking component flaw in DatagramChannelImpl that could let an unauthenticated attacker cause a partial denial of service over the network. Several co...

CVE-2022-21291

CVE-2022-21291 affects Oracle Java SE (Hotspot) and Oracle GraalVM Enterprise Edition. Affected versions include Oracle Java SE 7u321, 8u311, 11.0.13, 17.0.1 and GraalVM EE 20.3.4/21.3.0. It is exploitable over network via multiple protocols and can lead to unauthorized updates/deletes of data or...

CVE-2024-29944

The CVE-2024-29944 issue affects Mozilla Firefox on desktop (not mobile), allowing an attacker to inject an event handler into a privileged object to achieve arbitrary JavaScript execution in the parent process. Affects Firefox versions older than 124.0.1 and Firefox ESR older than 115.9.1; multi...

CVE-2024-39494

CVE-2024-39494 – Linux kernel ima use-after-free on dentry name The flaw occurs in the IMA path where a dentry’s dname.name can be changed by a rename, and the previous value may be freed. The early value could be freed before a stable snapshot is taken because the locking conditions (dentry/d_lo...

CVE-2018-2582

CVE-2018-2582 affects Oracle Java SE/OpenJDK (Hotspot) in Java SE 8u152, 9.0.1 and Java SE Embedded 8u151. The vulnerability occurs in the Hotspot/Libraries/AWT areas via network-accessible vectors, with unauthenticated remote exploitation and user interaction required for some attack paths. Publ...

CVE-2018-3149

CVE-2018-3149 affects Oracle Java SE family (Java SE, Java SE Embedded, JRockit) in the JNDI component, with vulnerable Java runtimes including Java 6u201, 7u191, 8u182 and 11; Java SE Embedded 8u181; JRockit R28.3.19. The root cause is within the Java components referenced (JNDI) and can allow a...

CVE-2019-19906

CVE-2019-19906 affects Cyrus SASL 2.1.27 (and related builds) with an out-of-bounds write in _sasl_add_string in common.c, leading to unauthenticated remote denial-of-service when processing malformed LDAP packets (used by OpenLDAP in the chain). Remediation is to upgrade to a patched Cyrus SASL ...

CVE-2020-14782

CVE-2020-14782 affects Oracle/OpenJDK Java SE/SE Embedded libraries (notably the Certificates processing) with affected versions including Java 7u271, 8u261, 11.0.8, 15 and Java SE Embedded 8u261. Connected advisory data confirms multiple vendors package updates across OpenJDK variants (e.g., ALA...

CVE-2021-28652

CVE-2021-28652 concerns Squid before 4.15 and 5.x before 5.0.6. The issue stems from incorrect parser validation, allowing a Denial of Service attack against the Cache Manager API. A trusted client with Cache Manager API access can trigger memory leaks that, over time, lead to a DoS via an unspec...

CVE-2021-3564

CVE-2021-3564 describes a local, double-free memory corruption in the Linux kernel Bluetooth HCI device initialization. A local attacker could crash the system by triggering the flaw when attaching a malicious HCI TTY Bluetooth device; the issue affects Linux kernel versions from 3.13 onward. Con...

CVE-2021-38204

CVE-2021-38204 affects the Linux kernel MAX-3421 host USB controller driver (drivers/usb/host/max3421-hcd.c). The flaw allows a physically proximate attacker to trigger a use-after-free and cause a denial of service (system panic) by removing a MAX-3421 USB device in certain situations. A fix is ...

CVE-2022-28390

CVE-2022-28390 is a Linux kernel vulnerability: a double-free in ems_usb_start_xmit() implemented in drivers/net/can/usb/ems_usb.c, affecting kernels up to 5.17.1. Connected advisories (Astra Linux, ALMAS/AL2, Debian DSA) reference this CVE and include it among kernel fixes; they indicate patchin...

CVE-2023-26604

CVE-2023-26604 affects systemd before 247. The root cause is that systemd does not set LESSSECURE=1, allowing less to spawn as root and enabling local privilege escalation when systemctl is used from sudo. Existence of substantiated impact: local privilege escalation with high severity. Remediati...

CVE-2024-5629

CVE-2024-5629 describes an out-of-bounds read in the PyMongo BSON deserializer. The advisory notes that PyMongo 4.6.2 and earlier can deserialize malformed BSON provided by a server, potentially raising an exception that may contain arbitrary memory. Affected component: PyMongo’s bson module. Imp...

CVE-2019-11486

The CVE-2019-11486 entry describes multiple race conditions in the Siemens R3964 line discipline driver (drivers/tty/n_r3964.c) of the Linux kernel, affecting versions before 5.0.8. This yields local exploitation potential with full confidentiality, integrity, and availability impact. A fix is av...

CVE-2019-15961

CVE-2019-15961 affects ClamAV’s email parsing MIME routines in versions 0.102.0, 0.101.4 and earlier. The root cause is inefficient MIME parsing that can cause the ClamAV scanning process to run for an indefinitely crafted email file, enabling an unauthenticated remote attacker to cause a denial-...

CVE-2021-31916

CVE-2021-31916 is a Linux kernel vulnerability in the device-mapper code (drivers/md/dm-ioctl.c, list_devices) causing an out-of-bounds memory write due to a bound check failure in kernels before 5.12. An attacker with CAP_SYS_ADMIN (local, no user interaction) can trigger a heap overrun, potenti...

CVE-2021-41099

Redis EoF/heap corruption CVE-2021-41099 arises from an integer overflow in the Redis string library when proto-max-bulk-len is set to an excessively large value, allowing crafted network payloads to potentially cause denial of service or remote code execution through heap corruption. Affected ve...

CVE-2022-21296

CVE-2022-21296 affects Oracle Java SE (JAXP, Serialization, Libraries, 2D/Hotspot) and Oracle GraalVM Enterprise Edition. Affected Java SE versions: 7u321, 8u311, 11.0.13, 17.0.1; GraalVM EE: 20.3.4, 21.3.0. The issue allows unauthenticated, network-accessible exploitation that can lead to readin...

CVE-2022-28356

CVE-2022-28356 is a Linux kernel vulnerability describing a refcount leak in net/llc/af_llc.c that affects kernels before 5.17.1. Connected docs confirm the issue and reference a fix in 5.17.1 (and advisories in Debian DSA 5127-1/DSA-5173-1, Astra/Linux bulletins). The CVSS v3.1 base score is 5.5...

CVE-2022-34918

CVE-2022-34918 affects the Linux kernel up to 5.18.9 in the Netfilter nf_tables subsystem. A type confusion in nft_set_elem_init can trigger a heap/buffer overflow in nft_set_elem_init, allowing a local attacker who already has an unprivileged user namespace to escalate to root by gaining CAP_NET...

CVE-2023-27932

CVE-2023-27932 affects WebKitGTK/WebKitGTK-based WebKit implementations (notably WebKit2GTK) and is a Same Origin Policy bypass via processing malicious web content. Public advisories in Debian, Fedora, and AlmaLinux confirm this CVE is fixed by updates to webkit2gtk/webkitgtk components (e.g., D...

CVE-2018-11805

In Apache SpamAssassin, multiple CVEs (notably CVE-2018-11805 and CVE-2020-1930) describe a command-execution flaw in which crafted configuration files (.cf) can run system commands with same privileges as the spamd process. The root cause is untrusted or crafted rule/config files enabling local ...

CVE-2018-19985

CVE-2018-19985 is a Linux kernel vulnerability describing an out-of-bounds read in hso_get_config_data (drivers/net/usb/hso.c) caused by indexing an array with the device-provided if_num. This is a local, kernel-space issue that could lead to a crash. Public IBM advisories for the IBM 4769 toolki...

CVE-2019-2816

CVE-2019-2816 affects Oracle Java SE/Java SE Embedded Networking and related components (Utilities) with affected Java SE versions 7u221, 8u212, 11.0.3, 12.0.1 and Java SE Embedded 8u211. IBM AIX security bulletin confirms CVSS 3.0 base score 4.8 (Network, High/AC:H, Privileges N, User Interactio...

CVE-2019-3882

CVE-2019-3882 affects the Linux kernel vfio interface: a local user owning a vfio device could abuse DMA mappings to memory and exhaust system memory, enabling a denial of service. Publicly available connected documents confirm the vulnerability and its DoS impact; Debian and other advisories inc...

CVE-2020-36330

CVE-2020-36330 describes an out-of-bounds read in libwebp prior to version 1.0.1, triggered in the ChunkVerifyAndAssign function. The documented impact is data confidentiality loss and reduced availability. Public references in the Connected documents corroborate the flaw in libwebp and align wit...

CVE-2021-28153

GLib/GNOME GLib before 2.66.8 is affected by CVE-2021-28153: when g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it may create the target as an empty file. This behavior could be security-relevant if the symlink is attacker-controlled...

CVE-2021-3246

CVE-2021-3246 describes a heap buffer overflow in libsndfile’s msadpcm_decode_block (v1.0.30) that can allow arbitrary code execution through a crafted WAV file. Multiple connected advisories confirm the vulnerable component and affected library (libsndfile) and show vendor advisories for various...

CVE-2024-50602

CVE-2024-50602 affects libexpat prior to 2.6.4. There is a crash in XML_ResumeParser when XML_StopParser can stop/suspend an unstarted parser. Affected: expat library used by various products; root cause is improper handling of parser state. Impact is a crash (DoS potential) as described in linke...

CVE-2019-12521

CVE-2019-12521 is a Squid vulnerability where, while parsing ESI, the ESIContext buffer used to hold ESIElements is overflowed due to an off-by-one bug in addStackElement. The overflow is within the same structure and causes a crash during processing (not adjacent memory corruption). Affected: Sq...

CVE-2019-13309

CVE-2019-13309 : ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory caused by mishandling NoSuchImage in CLIListOperatorImages (MagickWand/operation.c). This can allow memory exhaustion leading to a denial of service. The advisory notes the issue and recommends updating ImageMagick ...

CVE-2019-18809

CVE-2019-18809 affects the Linux kernel memory management in the af9005 DVB-T USB device driver. The vulnerability is a memory leak in af9005_identify_state() in drivers/media/usb/dvb-usb/af9005.c, potentially enabling a denial of service through memory exhaustion on affected kernels (through 5.3...

CVE-2020-8265

The CVE-2020-8265 issue is a use-after-free in Node.js TLS handling that affects 10.x, 12.x, 14.x, and 15.x lines. The vulnerability arises when writing to a TLS-enabled socket: node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap; if DoWrite returns no error, t...

CVE-2019-19056

CVE-2019-19056 affects the Linux kernel driver mwifiex_pcie_alloc_cmdrsp_buf() in drivers/net/wireless/marvell/mwifiex/pcie.c. Root cause: memory leak when mwifiex_map_pci_memory() fails, leading to memory exhaustion and potential DoS. Exploitation details are not provided in the connected docume...

CVE-2020-14797

CVE-2020-14797 affects Oracle/OpenJDK Java SE Libraries (path validation) across multiple Java versions. Connected sources indicate this vulnerability residing in the Libraries component with affected OpenJDK packages such as java-1.8.0-openjdk and related ALAS/Amazon advisories, listing path val...

CVE-2020-15707

CVE-2020-15707 is a GRUB2 bootloader vulnerability (initrd size handling) causing a heap-based buffer overflow via integer overflow in initrd processing. The flaw affects GRUB2 2.04 and earlier as deployed in multiple distros (Debian, Red Hat, Ubuntu) and can enable arbitrary code execution durin...

CVE-2021-20316

CVE-2021-20316 affects Samba: an authenticated attacker can read or modify share metadata due to a flaw in handling file/directory metadata, potentially enabling operations outside the intended share. Affected Samba versions exist in multiple OS packages; several connected advisories note that a ...

CVE-2021-22945

Summary: CVE-2021-22945 affects libcurl/curl when sending data to an MQTT server, where in some cases a pointer to freed memory could be reused and freed again. This is a memory-use-after-free/double-free issue in libcurl. What is affected: libcurl/curl (MQTT data transmission scenarios) with vul...

CVE-2021-33813

CVE-2021-33813 concerns an XXE vulnerability in JDOM’s SAXBuilder up to version 2.0.6, allowing denial-of-service via a crafted HTTP request. Connected advisories confirm the issue affects jdom/jdom2 and list downstream fixes/upgrades in Linux distributions (e.g., Amazon Linux advisories ALAS2-20...