CVE-2017-16943

CVE-2017-16943 and CVE-2017-16944 are use-after-free (CVE-16943) and BDAT handling DoS (CVE-16944) flaws in Exim’s receive_msg function (receive.c) for the SMTP daemon on Exim 4.88/4.89. CVE-16943 enables remote code execution or crash; CVE-16944 causes denial of service via infinite loop/stack e...

CVE-2019-19534

Summary: CVE-2019-19534 affects the Linux kernel before 5.3.11, enabling a local info-leak via the Peak USB CAN driver (drivers/net/can/usb/peak_usb/pcan_usb_core.c) when a malicious USB device is connected. The root cause is missing initialization of certain structures in the peak_usb CAN driver...

CVE-2019-2962

CVE-2019-2962 is confirmed in connected documents as an OpenJDK 7 issue affecting the 2D component, specifically a NULL pointer dereference in DrawGlyphList (2D) that can contribute to denial of service. The CentOS/Red Hat advisories list OpenJDK 7 packages as affected and recommend updating to a...

CVE-2020-27821

CVE-2020-27821 is a QEMU memory-management vulerability where the msix_table_mmio_write() path can cause an out-of-bounds write to the MSI-X table during MMIO during memory-region cache initialization. A guest user could crash the QEMU host process, yielding a denial of service. The issue affects...

CVE-2020-29599

ImageMagick-identified CVE-2020-29599 is a command-injection flaw in the -authenticate handling for password-protected PDFs, exploitable via coders/pdf.c. Affected releases include ImageMagick 6.9.11-40 and 7.x prior to 7.0.10-40; user-supplied passwords could inject shell commands. Public adviso...

CVE-2020-9951

CVE-2020-9951 is a WebKit use-after-free vulnerability in Safari (WebKit GTK also mirrors related WebKit issues). Exploitation requires a victim to visit a specially crafted web site, potentially enabling arbitrary code execution on affected Apple platforms. The issue is addressed in Safari/WebKi...

CVE-2021-27291

CVE-2021-27291 affects pygments: the regex-based lexers used to parse languages can exhibit exponential/cubic worst-case behavior, enabling ReDoS with crafted input and potentially causing DoS. The issue is documented as fixed in pygments 2.7.4. Connected advisories reference python-pygments upgr...

CVE-2021-45444

CVE-2021-45444 affects zsh up to version 5.8.0, where an attacker-controlled command output inside the prompt can trigger code execution due to recursive PROMPT_SUBST expansion (notably via a %F argument). Connected advisories confirm the issue in zsh and state the fix as upgrading to zsh 5.8.1. ...

CVE-2023-42852

CVE-2023-42852 is a WebKitGTK/WebKitGTK4 vulnerability described as a logic issue where processing web content may lead to arbitrary code execution. Affected products include the WebKitGTK/WebKitGTK4 stack; the issue is fixed in WebKitGTK/WebKitGTK4 updates (examples: AL2 ALAS advisory references...

CVE-2018-16881

CVE-2018-16881 affects rsyslog’s imptcp module. An attacker can send a specially crafted TCP message to imptcp, causing the daemon to crash (DoS). Vulnerable in rsyslog versions before 8.27.0; upgrade to 8.27.0+ to remediate. Some advisories (e.g., MiracleLinux AXSA) reference an integer overflow...

CVE-2019-19052

CVE-2019-19052 is a memory-leak vulnerability in the Linux kernel, specifically in drivers/net/can/usb/gs_usb.c within the gs_can_open() function. The issue allows a denial of service through memory consumption when usb_submit_urb() fails, affecting the kernel up to version before 5.3.11. The rea...

CVE-2019-2987

CVE-2019-2987 affects the Java SE OpenJDK 2D component; the root cause is a missing glyph bitmap dimension check in FreetypeFontScaler, enabling unauthenticated network-access exploitation with potential partial DoS via crafted font data. Public advisories (e.g., Red Hat/CentOS) associate this CV...

CVE-2019-9852

LibreOffice CVE-2019-9852 is an insufficient URL encoding flaw in the allowed script location check for pre-installed macros, which could allow bypassing path verification and executing scripts. Affected products are Document Foundation LibreOffice versions prior to 6.2.6. Remediation per connect...

CVE-2020-17525

CVE-2020-17525 affects Subversion’s mod_authz_svn. A crash occurs when using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option and a client requests a non-existent repository URL, potentially disrupting service. Fixed in various builds: mod_dav_svn + mod_authz_svn servers ...

CVE-2020-21913

The CVE-2020-21913 entry concerns ICU-20850 (ICU 66.1) containing a use-after-free in pkg_createWithAssemblyCode (tools/pkgdata/pkgdata.cpp). IBM’s security bulletin links this ICU issue to IBM Db2, stating multiple ICU-related vulnerabilities affect Db2 and providing affected versions (DB2 10.5....

CVE-2020-26259

CVE-2020-26259 affects XStream in IBM Storage Copy Data Management (2.2.0.0–2.2.25.0). Unmarshalling user-supplied data could allow arbitrary file deletion on the host if the process runs with sufficient privileges. IBM’s remediation for the affected products is to upgrade to 2.2.26.0 (Linux) and...

CVE-2020-6519

CVE-2020-6519 is a policy bypass in the Content Security Policy (CSP) for Google Chrome, allowing a remote attacker to bypass CSP via a crafted HTML page in Chrome versions prior to 84.0.4147.89. Connected sources confirm public advisories and fixes across distributions: Debian notes a security u...

CVE-2021-22939

CVE-2021-22939 affects Node.js HTTPS usage where passing undefined for rejectUnauthorized may bypass certificate validation, allowing connections to servers with expired certificates. Root cause: incomplete validation of the tls rejectUnauthorized parameter. Affected ranges vary by release stream...

CVE-2022-0617

CVE-2022-0617 is a NULL pointer dereference in the Linux kernel UDF filesystem. A local user could trigger udf_file_write_iter with a crafted UDF image to crash the system. Affected: Linux kernel 4.2-rc1 through 5.17-rc2 per initial description; multiple connected advisories corroborate UDF NULL ...

CVE-2022-32212

CVE-2022-32212 is a Node.js OS Command Injection due to an insufficient IsAllowedHost validation, enabling rebinding attacks. Affected versions are Node.js <14.20.0, <16.20.0, and

CVE-2023-23908

CVE-2023-23908 remains an information-disclosure risk tied to improper access control in some 3rd Gen Intel Xeon Scalable processors. Connected advisories indicate mitigations via microcode updates. Notable remediation references across sources include: Debian security advisories (intel-microcode...

CVE-2017-1000366

CVE-2017-1000366 affects glibc (vulnerable in 2.25 and earlier). A flaw in heap/stack memory handling allows crafted LD_LIBRARY_PATH values to influence allocation and memory layout, potentially enabling local arbitrary code execution via stack/heap aliasing. Several advisories and distributions ...

CVE-2017-13078

CVE-2017-13078 is part of the KRACK family impacting WPA2. A attacker in Wi‑Fi range could reinstall the GTK during the 4‑way handshake, replaying frames to clients. Apple addresses this via security updates (e.g., HT208221/HT208222) for macOS High Sierra/Sierra and related AirPort firmware; exac...

CVE-2018-1000024

The CVE-2018-1000024 vulnerability affects Squid HTTP Caching Proxy (versions 3.0–3.5.27 and 4.0–4.0.22). It is caused by Incorrect Pointer Handling in ESI Response Processing, enabling a Denial of Service when a remote server delivers an HTTP response payload with valid but unusual ESI syntax. I...

CVE-2019-15098

CVE-2019-15098 affects the Linux kernel driver ath6kl/usb.c (USB wifi driver) up to version 5.2.9. The issue is a NULL pointer dereference caused by an incomplete address in an endpoint descriptor, potentially leading to a crash or denial of service. The connected Nessus/Unity Linux advisories co...

CVE-2019-18408

CVE-2019-18408 affects the libarchive library: a use-after-free in archive_read_format_rar_read_data (archive_read_support_format_rar.c) in a certain ARCHIVE_FAILED scenario, related to Ppmd7_DecodeSymbol, occurring in versions before 3.4.0. The issue is triggered while decompressing a crafted ar...

CVE-2020-27617

CVE-2020-27617 affects QEMU 4.2.1, where a vulnerability in the network guest handling (eth_get_gso_type in net/eth.c) allows a guest OS user to trigger an assertion failure, crashing the QEMU process via crafted packet data that lacks a valid Layer 3 protocol. This is documented across multiple ...

CVE-2021-3544

CVE-2021-3544 concerns memory leaks in QEMU’s virtio vhost-user-gpu (vhost-user-gpu.c and virgl.c) due to improper memory release after the effective lifetime, affecting versions up to and including 6.0. The issue, identified across multiple advisories, is a memory leak in the vhost-user-gpu comp...

CVE-2021-38199

CVE-2021-38199 concerns the Linux kernel’s NFSv4 client. The vulnerability arises from incorrect connection-setup ordering in fs/nfs/nfs4client.c, which can be triggered by remote NFSv4 servers during trunking detection, potentially causing a denial of service by hanging mounts. Connected advisor...

CVE-2022-2078

CVE-2022-2078 is a Linux kernel vulnerability in nft_set_desc_concat_parse() that can trigger a buffer overflow, leading to denial of service and possibly code execution. The linked AstraEU/IBM advisories reiterate the same function and impact, describing local access requirements and potential f...

CVE-2023-3863

CVE-2023-3863 is a use-after-free vulnerability in the Linux kernel’s NFC stack (nfc_llcp_find_local in net/nfc/llcp_core.c). A local privileged user could trigger memory misuse leading to kernel information leak (impact on confidentiality; I=H, A=H in some advisories) and potential escalation. P...

CVE-2018-17407

Summary (CVE-2018-17407) : TeX Live before 2018-09-21 contains a buffer overflow in the Type 1 font handling code, specifically in the t1_check_unusual_charstring function within writet1.c. This vulnerability can allow arbitrary code execution if a malicious font is loaded by vulnerable tools (pd...

CVE-2021-32628

CVE-2021-32628 affects Redis. An integer overflow in the ziplist data structure can be triggered by setting very large ziplist-related configuration parameters (hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries, zset-max-ziplist-value), leading to heap corruption and pote...

CVE-2021-3872

Vim CVE-2021-3872 is a heap-based buffer overflow in drawscreen.c, specifically the win_redr_status() path. Reports note Vim packages were shipped with vulnerable builds and a fix is available via updated Vim releases; remediation is to upgrade Vim to a patched version. (Connected advisories refe...

CVE-2022-21349

CVE-2022-21349 is an Oracle Java SE/GraalVM Enterprise Edition vulnerability affecting multiple Java components (e.g., 2D, ImageIO, JAXP, Hotspot, Libraries) across affected releases. Public advisories show affected Java SE versions (e.g., 7u321, 8u311) and GraalVM EE releases (20.3.4, 21.3.0). E...

CVE-2020-12108

Summary: CVE-2020-12108 affects GNU Mailman prior to 2.1.31, allowing Arbitrary Content Injection via the /options/mailman page (and related login/archival areas per advisories). Affected software: Mailman 2.1.x series before 2.1.31. Root cause / vector: improper handling on the options/login pat...

CVE-2020-8112

CVE-2020-8112 pertains to OpenJPEG’s OpenJPEG2/OpenJP2 codebase. A heap-based buffer overflow occurs in opj_t1_clbl_decode_processor (file openjp2/t1.c) when qmfbid==1, affecting OpenJPEG 2.3.1 and earlier builds up to 2020-01-28 (a separate issue from CVE-2020-6851). Public advisories and Debian...

CVE-2021-21779

CVE-2021-21779 is a use-after-free vulnerability in the way WebKitGTK’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted page can cause an information leak and memory corruption; exploitation requires the victim to visit a malicious page. Public advisories from Arch...

CVE-2021-32627

Redis has a heap-corruption vulnerability (CVE-2021-32627) caused by an integer overflow when modifying proto-max-bulk-len/client-query-buffer-limit to very large values, potentially enabling remote code execution. Affected Redis versions are fixed in 6.2.6, 6.0.16, and 5.0.14. The recommended re...

CVE-2022-45693

CVE-2022-45693 affects the Jettison library (libjettison-java) prior to version 1.5.2. The issue is a stack overflow triggered by the map parameter in Jettison, enabling a Denial of Service via a crafted string. Connected sources indicate affected projects and packages (Debian libjettison-java fi...

CVE-2016-5131

CVE-2016-5131 is a use-after-free in libxml2 up to version 2.9.4 (as used in Chrome before 52.0.2743.82) triggered by XPointer range-to, leading to possible denial of service and potentially other impact. Connected advisories reaffirms libxml2 as the vulnerable component and references several ve...

CVE-2016-9905

CVE-2016-9905 is tied to a crash in EnumerateSubDocuments when adding or removing sub-documents, affecting Thunderbird and Firefox ESR prior to 45.6. The connected sources consistently identify a crash/memory safety context (e.g., use-after-free and memory corruption patterns across related CVEs)...

CVE-2018-14469

CVE-2018-14469 affects tcpdump prior to 4.9.3. Root cause: buffer over-read in the IKEv1 parser (print-isakmp.c:ikev1_n_print()). Affected: tcpdump versions before 4.9.3. Impact stated in related advisories for tcpdump family includes potential crashes or instability; exploitation details are not...

CVE-2018-14574

The CVE-2018-14574 entry describes an Open Redirect in Django's CommonMiddleware. Affected versions are Django 1.11.x prior to 1.11.15 and 2.0.x prior to 2.0.8. Exploitation can redirect users to arbitrary URLs when CommonMiddleware is used (with APPEND_SLASH considerations noted by some advisori...

CVE-2018-16851

CVE-2018-16851 affects Samba AD DC LDAP server. A NULL pointer dereference during LDAP entry processing (caching LDAP entries up to 256MB) can crash the Samba process, causing a denial of service. Affected products/versions include Samba 4.0.0 and older 4.7.12, 4.8.7, 4.9.3. The issue is specific...

CVE-2019-12814

CVE-2019-12814 is detailed in an IBM security bulletin related to Cloudera Observability on Premises (IBM) 3.5.3. The flaw stems from a polymorphic-typing deserialization issue in FasterXML jackson-databind 2.x up to 2.9.9. When Default Typing is enabled for an externally exposed JSON endpoint an...

CVE-2019-15166

CVE-2019-15166 affects tcpdump: lmp_print_data_link_subobjs() in print-lmp.c before 4.9.3 lacks bounds checks, enabling memory corruption that could crash the application when processing crafted data. Connected sources confirm this specific subroutine and bug class, and multiple advisories refere...

CVE-2019-16942

CVE-2019-16942 affects FasterXML jackson-databind 2.0.0–2.9.10. When Default Typing is enabled for an externally exposed JSON endpoint and the service includes the commons-dbcp 1.4 jar on the classpath, with an accessible RMI endpoint, the vulnerability can allow execution of a malicious payload ...

CVE-2020-24511

CVE-2020-24511 is an information-disclosure vulnerability due to improper isolation of shared resources in some Intel processors, exploitable by a local, authenticated attacker. Connected advisories confirm affected microcode updates and remediation paths. Arch Linux advisory ASA-202106-34 recomm...

CVE-2021-26930

CVE-2021-26930 affects the Xen PV backend: Linux kernel 3.11–5.10.16 Ker-branch Xen blkback.c grants mapping references from the frontend and may discard errors or fail to update internal state, causing the caller to access unmapped space. The result is potential denial of service, information le...