CVE-2022-3594

CVE-2022-3594 is a Linux kernel vulnerability in the BPF component: the intr_callback in drivers/net/usb/r8152.c can cause logging of excessive data. It is exploitable remotely as described; a patch/update is recommended. Connected advisories (Astra Linux, Amazon Linux livepatch) mirror these det...

CVE-2023-4572

CVE-2023-4572 is a use-after-free vulnerability in Chrome/Chromium's MediaStream that could allow remote code execution via a crafted HTML page, caused by heap corruption. The CVE affects Chrome/Chromium browsers before the referenced fix version 116.0.5845.140. Public updates released by Debian ...

CVE-2006-3918

CVE-2006-3918 is an Apache HTTP Server/IBM HTTP Server issue where the HTTP Expect header is not sanitized when echoed back in error messages, enabling potential cross-site scripting via headers (as demonstrated with Flash/other clients). Affected products and versions include Apache HTTP Server ...

CVE-2015-2331

CVE-2015-2331: Integer overflow in libzip’s _zip_cdir_new (zip_dirent.c) used by PHP ZIP extension. Affected: libzip

CVE-2017-13704

CVE-2017-13704 affects dnsmasq before 2.78. The root cause is a mismatch between DNS packet size and the expected size, causing a negative value to be used in a memset call (unsigned), which can write up to 0xffffffff bytes and crash dnsmasq. Multiple advisories (including Debian, Alt Linux, Free...

CVE-2017-8817

The CVE-2017-8817 issue is a read-out-of-bounds in libcurl’s FTP wildcard function that occurs when a path ends with an opening bracket [, affecting curl/libcurl versions earlier than 7.57.0. This can lead to a crash and potential information leakage. Amazon Linux 2 and other advisories (ALAS-201...

CVE-2018-14679

CVE-2018-14679 affects libmspack (mspack/chmd.c) with an off-by-one error in CHM PMGI/PMGL chunk number validation, reported to cause a denial of service through an uninitialized data dereference and crash when using versions before 0.7alpha. Connected advisories (ALAS-2019-1152, RH/CentOS errata...

CVE-2018-14880

tcpdump has a confirmed vulnerability CVE-2018-14880 in the OSPFv3 parser: a buffer over-read in ospf6_print_lshdr() inside print-ospf6.c, affecting tcpdump before version 4.9.3. Connected advisories (e.g., AlmaLinux ALSA-2020:4760, Debian DSA-4547-1, DLA-1955-1) reference this CVE and span multi...

CVE-2018-16876

CVE-2018-16876 affects Ansible prior to versions 2.5.14, 2.6.11, and 2.7.5, exposing information via information disclosure in vvv+ mode when no_log is enabled. The issue is a data leakage vulnerability, confirmed across multiple advisories (e.g., RHSA-2019-0564/0590 and related distributions) an...

CVE-2019-13164

CVE-2019-13164 affects QEMU via qemu-bridge-helper.c. The issue arises in QEMU 3.1 and 4.0.0 where a network interface name obtained from bridge.conf or a --br=bridge option is not constrained to the IFNAMSIZ size, enabling an ACL bypass. Connected sources corroborate that this ACL bypass vulnera...

CVE-2019-14813

Ghostscript (before 9.50) contains a sandbox escape in the setsystemparams path that can bypass -dSAFER controls, potentially allowing access to the file system or execution of arbitrary commands via crafted PostScript. The issue is reported as CVE-2019-14813 and is addressed in upstream fixes (g...

CVE-2019-5834

CVE-2019-5834 involves insufficient data validation in Blink used by Google Chrome, enabling domain spoofing via a crafted HTML page in Chrome versions older than 75.0.3770.80. The vulnerability is attributed to the Blink component and affects Chrome before the fixed release. Debian advisories li...

CVE-2019-7150

The CVE-2019-7150 issue affects elfutils (0.175) where elf64_xlatetom in libelf/elf32_xlatetom.c can segfault because dwfl_segment_report_module does not check if core file dyn data is truncated. This leads to a crash/denial-of-service when processing crafted ELF inputs (as demonstrated by eu-sta...

CVE-2020-11526

CVE-2020-11526 affects FreeRDP (libfreerdp/core/update.c) with an Out-of-bounds Read in versions greater than 1.1 up to 2.0.0-rc4. Multiple connected advisories confirm this issue and document that the vulnerability arises from an OOB read in update.c, potentially impacting memory safety. Publicl...

CVE-2020-12268

CVE-2020-12268 affects Artifex jbig2dec

CVE-2020-35738

CVE-2020-35738 affects WavPack, specifically version 5.3.0. The vulnerability is an out-of-bounds write in WavpackPackSamples (pack_utils.c) caused by an integer overflow in a malloc argument. Connected advisories corroborate impact variants including arbitrary code execution (Arch Linux ASA-2021...

CVE-2020-6458

CVE-2020-6458 is an out-of-bounds read/write in PDFium used by Google Chrome, allowing heap corruption via a crafted PDF file in Chrome before 81.0.4044.122. Remediation: upgrade Chrome to 81.0.4044.122 or newer (as reflected in Debian/Fedora advisories). Ensure affected systems are updated to ve...

CVE-2020-6482

CVE-2020-6482 describes an insufficient policy enforcement vulnerability in Chrome’s developer tools. The root cause is improper access control in the developer tools component, allowing a user who installs a crafted malicious extension to bypass navigation restrictions. This could enable a remot...

CVE-2021-20190

CVE-2021-20190 is a Jackson Databind deserialization vulnerability involving the interaction between serialization gadgets and typing, present in Jackson Databind up to 2.9.10.7. The IBM bulletin for Cloudera Observability confirms this CVE as part of a collection and notes a fix in Cloudera Obse...

CVE-2021-30887

CVE-2021-30887 is a WebKit-related logic issue affecting how Content Security Policy is enforced when processing malicious web content. The description states that improved restrictions fix the problem, with the vulnerability fixed in Apple platforms: macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15...

CVE-2021-43542

CVE-2021-43542 is a information-disclosure vulnerability involving XMLHttpRequest: error messages could reveal the existence of an external protocol handler, enabling an attacker to identify installed applications. Connected sources indicate the issue affects Thunderbird < 91.4.0, Firefox ESR ...

CVE-2022-22826

CVE-2022-22826 is an integer overflow in the Expat (libexpat) XML parser, specifically in nextScaffoldPart of xmlparse.c, affecting versions before 2.4.3. The initial CVE description confirms the overflow, and connected advisories/patch notes (e.g., AlmaLinux ALAS-2022-1603/7692, CESA-2022:1069) ...

CVE-2022-39842

CVE-2022-39842 affects the Linux kernel up to version 5.19, specifically in drivers/video/fbdev/pxa3xx-gcu.c (pxa3xx_gcu_write). The count parameter has a type conflict of size_t versus int, causing an integer overflow and bypassing the size check; this value is then passed as the third argument ...

CVE-2023-1077

CVE-2023-1077A: Linux kernel scheduling: In pick_next_rt_entity(), a type confusion can occur where a non-NULL, non-entry object (a list_head) is misinterpreted as a sched_rt_entity, bypassing BUG_ON checks and causing memory corruption. Public docs (Astra Linux page) mirror this description for ...

CVE-2009-2692

CVE-2009-2692 stems from uninitialized proto_ops in the Linux kernel (SOCKOPS_WRAP), allowing local users to trigger a NULL pointer dereference via mmap of page zero and gain privileges by invoking an unavailable operation (e.g., sock_sendpage on PF_PPPOX). Public details reference local privileg...

CVE-2016-2105

CVE-2016-2105 concerns OpenSSL: an overflow in EVP_EncodeUpdate can cause a heap memory corruption and denial of service when processing large amounts of data. The connected OpenSSL advisories confirm the vulnerability and cite fixes for versions 1.0.1t and 1.0.2h (backported fixes for earlier 0....

CVE-2019-14744

The CVE-2019-14744 issue affects KDE Frameworks KConfig prior to 5.61.0, specifically libKF5ConfigCore.so, where mishandling of .desktop and .directory files enables code execution with minimal user interaction. The vulnerability stems from how KConfig processes shell commands in desktop/config f...

CVE-2020-11764

OpenEXR before 2.4.1 contains an out-of-bounds write in copyIntoFrameBuffer (ImfMisc.cpp), CVE-2020-11764. Amazon Linux 2 ALAS2-2020-1499 confirms the OpenEXR fix and provides updated packages; Red Hat/CentOS advisories (RHSA-2020:4039) also address CVE-2020-11764 among related OpenEXR issues. Re...

CVE-2020-14954

CVE-2020-14954 affects mutt before 1.14.4 and NeoMutt before 2020-06-19. A STARTTLS buffering issue causes the client to read extra data after a server "begin TLS" response and evaluate it in a TLS context, enabling potential man‑in‑the‑middle (MITM) exploitation during IMAP/SMTP/POP3. The issue ...

CVE-2020-1739

CVE-2020-1739 affects Ansible (2.7.16 and earlier, 2.8.8 and earlier, 2.9.5 and earlier). The flaw arises when a password is supplied to the svn module via the password argument, causing the password to be echoed into the svn command line and readable by other users on the same node by inspecting...

CVE-2020-36229

CVE-2020-36229 affects OpenLDAP prior to 2.4.57, where a flaw in ldap_X509dn2bv causes a slapd crash during X.509 DN parsing in ad_keystring, leading to denial of service. Public details confirm the vulnerability, its root cause in OpenLDAP’s X.509 DN parsing path, and that upgrading to OpenLDAP ...

CVE-2020-6521

CVE-2020-6521 affects Google Chrome prior to 84.0.4147.89, describing a side-channel information leakage in autofill that could let a remote attacker read potentially sensitive data from process memory via a crafted HTML page. Public details consistently identify Chrome/Chromium as the affected s...

CVE-2021-25284

CVE-2021-25284 affects SaltStack Salt prior to 3002.5, where salt.modules.cmdmod can log credentials to info or error logs. Exploitation details are not provided in the sources, but multiple advisories confirm credential leakage via logging within cmdmod. Remediation across sources centers on upg...

CVE-2022-3524

CVE-2022-3524 affects the Linux kernel IPv6 Handler’s ipv6_renew_options, causing a memory leak. The vulnerability can be triggered remotely per some sources; a patch is available and applies to mitigate the issue. Review the Linux kernel patches referenced in the CVE details and apply the approp...

CVE-2022-48566

CVE-2022-48566 affects Python up to 3.9.1, via a constant-time-defeating optimisation in hmac.compare_digest (Lib/hmac.py). The issue arises from optimisations in the accumulator variable, enabling potential leakage of sensitive information. Connected documents corroborate the same description an...

CVE-2023-28879

CVE-2023-28879 affects Ghostscript (through 10.01.0) with a buffer overflow in base/sbcp.c affecting BCPEncode/BCPDecode/TBCPEncode/TBCPDecode. The issue can corrupt internal PostScript interpreter data when the write buffer is near full and an escaped character is written, potentially causing to...

CVE-2023-5480

CVE-2023-5480 affects Chromium-based browsers (Google Chrome/Chromium) with versions prior to 119.0.6045.105. It describes an inappropriate implementation in Payments that could allow a remote attacker to bypass XSS protections via a malicious file. Public advisories in this set confirm remediati...

CVE-2017-11610

CVE-2017-11610 affects the XML-RPC server in Supervisor. An authenticated client can send a crafted XML-RPC request that exploits nested supervisord namespace lookups to execute arbitrary commands on the server, running with the same user as supervisord (potentially root). The issue is triggered ...

CVE-2018-5750

Technical details beyond the initial description are not present in the connected documents. The CVE-2018-5750 issue in the Linux kernel (via acpi_smbus_hc_add and SBS HC printk) is described in the Initial document as a local information disclosure; no additional public exploit/vendor-specific d...

CVE-2019-14811

Summary: Ghostscript before version 9.50 contains sandbox-safety bypasses in multiple procedures, notably the ".pdf_hook_DSC_Creator" path, allowing crafted PostScript to bypass -dSAFER and potentially access the file system or execute commands. Other vulnerable entry points include ".forceput" e...

CVE-2019-16167

CVE-2019-16167 affects sysstat and is caused by a memory corruption due to an integer overflow in remap_struct() within sa_common.c. The issue affects versions before 12.1.6. Impacts are memory corruption; practical exploit details are not provided in the supplied documents. The connected sources...

CVE-2019-19479

OpenSC has a historical vulnerability CVE-2019-19479: an incorrect read operation in libopensc/card-setcos.c during parsing of a SETCOS file attribute. This issue affects OpenSC up to 0.20.x (0.20.0-rc3) and was acknowledged across multiple advisories (including Debian LTS and AlmaLinux) with fix...

CVE-2019-9445

The CVE-2019-9445 entry describes a flaw in the Android kernel F2FS driver: an out-of-bounds read due to a missing bounds check, enabling local information disclosure with kernel privileges and no user interaction required. Connected Nessus advisories and Debian/Unity Linux advisories confirm the...

CVE-2020-15389

OpenJPEG up to 2.3.1 is affected by CVE-2020-15389: a use-after-free (and possible double-free) in jp2/opj_decompress.c when a directory contains a mix of valid and invalid files processed by the decompressor. The issue can crash the application or enable memory corruption; it is fixed in OpenJPE...

CVE-2020-26571

OpenSC is affected: gemsafe GPK driver vulnerability CVE-2020-26571 in OpenSC before 0.21.0-rc1, caused by a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init. Several connected advisories (Arch Linux ASA-202011-27, ALAS2-2023-2262, AlmaLinux ALSA-2021:1600, Astra Linux bulletin) indica...

CVE-2020-6422

CVE-2020-6422 is a use-after-free vulnerability in WebGL of Google Chrome before 80.0.3987.149, enabling a remote attacker to potentially cause heap corruption via a crafted HTML page. Mitigation: upgrade Chromium/Chrome to 80.0.3987.149 or newer (reported in Debian/Fedora advisories and Gentoo/G...

CVE-2020-6426

CVE-2020-6426: In Google Chrome, an implementation error in V8 prior to 80.0.3987.149 could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected software is Chrome before 80.0.3987.149 (and Chromium-based builds). Root cause: inappropriate V8 implementation. Impact d...

CVE-2020-6464

CVE-2020-6464 describes a type confusion in Blink/WebKit used by Google Chrome before 81.0.4044.138, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. Public disclosures in multiple advisories confirm this Chromium vulnerability, with affected rel...

CVE-2021-3197

SaltStack Salt before 3002.5 is vulnerable in the salt-api ssh client to a shell injection via ProxyCommand or via ssh_options provided in API requests. Affected component: salt-api SSH handling; root cause: improper handling of ProxyCommand/ssh_options inputs leading to command injection. Impact...

CVE-2021-43536

CVE-2021-43536: The connected advisories confirm an information-disclosure/URL leakage flaw triggered when navigating asynchronously in Firefox/Thunderbird prior to fixed releases. Affected: Thunderbird < 91.4.0, Firefox ESR < 91.4.0, Firefox