CVE-2022-3625

CVE-2022-3625 affects the Linux kernel, specifically the devlink subsystem. The issue is a use-after-free in the functions devlink_param_set and devlink_param_get in net/core/devlink.c, enabling a remote authenticated attacker on the local network to cause a denial of service. A patch is availabl...

CVE-2023-1161

Wireshark vulnerability CVE-2023-1161 affects the ISO 15765 and ISO 10681 dissectors, crashing the dissectors in Wireshark 4.0.0–4.0.3 and 3.6.0–3.6.11, which can enable denial of service via crafted captures or packet injection. The root cause is a crash in the ISO dissector code path. Affected ...

CVE-2023-30608

CVE-2023-30608 affects the Python package sqlparse (non-validating SQL parser module). A vulnerable regular expression in the parser can cause Regular Expression Denial of Service (ReDoS) leading to DoS conditions. The issue was introduced by commit e75e358 and is fixed in sqlparse 0.4.4 via comm...

CVE-2017-10090

CVE-2017-10090 affects Oracle/OpenJDK libraries (Java SE and Java SE Embedded). The connected documents confirm affected components and versions (Java SE: 7u141, 8u131; Java SE Embedded: 8u131) and describe the root cause as gaps in the Libraries/RMI-related areas that can bypass sandbox restrict...

CVE-2017-2636

CVE-2017-2636 details (NORMAL mode) : A race condition in the Linux kernel N_HLDC driver (n_hdlc) can lead to a double free. A local, unprivileged user who sets the HDLC line discipline on a tty device could exploit this to escalate privileges or cause a denial of service (system crash). Exploita...

CVE-2018-1088

CVE-2018-1088 affects GlusterFS 3.x via the snapshot scheduler: an unauthenticated client could exploit the scheduler to mount shared storage and escalate privileges by scheduling a malicious cronjob via a symlink. The issue is tied to a regression/regression-related chain (CVE-2018-1112) in patc...

CVE-2018-10938

CVE-2018-10938 is a DoS in the Linux kernel (present since v4.0-rc1 to v4.13-rc4) where a crafted remote network packet can force an infinite loop in cipso_v4_optptr() (net/ipv4/cipso_ipv4.c). Exploitation requires a non-default LSM/NetLabel configuration. The issue is triggered by network packet...

CVE-2018-5730

CVE-2018-5730 and CVE-2018-5729 affect MIT krb5 1.6 and later. Upstream and distributor advisories show that an authenticated kadmin user with permission to add principals to an LDAP Kerberos database can bypass the DN container check (CVE-2018-5730) or trigger a null dereference / kadmind bypass...

CVE-2018-8779

CVE-2018-8779 is a Ruby vulnerability in which UNIXServer.open and UNIXSocket.open did not check for NULL (NUL) bytes in the path, potentially creating an unintended socket. Public details in the provided documents show affected series include Ruby 2.2.x prior to 2.2.10, 2.3.x prior to 2.3.7, 2.4...

CVE-2019-10650

CVE-2019-10650: ImageMagick 7.0.8-36 Q16 has a heap-based buffer over-read in WriteTIFFImage (coders/tiff.c) that can cause denial of service or information disclosure via crafted TIFF images. Likely linked to LibTIFF write paths (TIFFRewriteDirectory/TIFFWriteDirectory) and incomplete prior fix....

CVE-2019-12520

CVE-2019-12520 affects Squid (versions up to 4.7 and 5.x per the sources). The vulnerability arises when Squid handles a request by computing an MD5 hash of the absolute URL to check the cache; if the URL includes a decoded UserInfo (username:password), that info is prepended to the domain. An at...

CVE-2019-13738

CVE-2019-13738 affects Google Chrome (navigation component) where insufficient policy enforcement allows a remote attacker to bypass site isolation via a crafted HTML page. The issue is in Chrome versions prior to 79.0.3945.79. Remediation per the provided records is to upgrade to the fixed versi...

CVE-2019-13741

CVE-2019-13741 affects Blink in Google Chrome before 79.0.3945.79, where untrusted clipboard input could be insufficiently validated, enabling a local attacker to bypass the same-origin policy via crafted clipboard data. Impact is local, with partial confidentiality/integrity/availability concern...

CVE-2019-7578

CVE-2019-7578 (InitIMA_ADPCM in SDL_wave.c) affects SDL 1.2.15 and 2.x up to 2.0.9, causing a heap-based buffer over-read. The connected advisories indicate potential for arbitrary code execution in some contexts (notably Arch Linux and AlmaLinux descriptions). Public fixes are available via vend...

CVE-2019-7637

CVE-2019-7637: SDL_FillRect in video/SDL_surface.c suffers a heap-based buffer overflow. Affected: SDL 1.2.x up to 1.2.15 and SDL 2.x up to 2.0.9. Impact, as described in multiple advisories, includes potential arbitrary code execution when processing crafted image/video/audio inputs. Connected a...

CVE-2019-9956

CVE-2019-9956 : ImageMagick vulnerability in the PopHexPixel path of coders/ps.c (stack-based buffer overflow) can enable denial of service or code execution with a crafted image file. Public advisories reference ImageMagick 7.0.8-35 Q16 as affected; multiple ALAS entries indicate a fix in later ...

CVE-2020-14397

CVE-2020-14397 affects LibVNCServer prior to 0.9.13. The issue is a NULL pointer dereference in libvncserver/rfbregion.c, which can cause a crash and contribute to a denial of service. Public references in multiple advisories (e.g., MiracleLinux, Alibaba Cloud Linux, Red Hat and Rocky Linux conte...

CVE-2020-28941

CVE-2020-28941 affects the Linux kernel’s Speakup screen reader (drivers/accessibility/spk_ttyio.c) up to version 5.9.9. Local attackers could trigger a denial of service by an invalid free when the line discipline is used more than once, leading to a system crash. The issue is confirmed in multi...

CVE-2020-36227

CVE-2020-36227 is an OpenLDAP flaw that causes an infinite loop in slapd when processing the cancel_extop Cancel operation, leading to denial of service. Public details in connected advisories confirm OpenLDAP before 2.4.57 is affected. Remediation documented in connected sources recommends upgra...

CVE-2022-22844

CVE-2022-22844 affects LibTIFF. Affected: libtiff prior to version 4.3.0-2 (as indicated by multiple advisories). Description in sources: LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy() in tif_unix.c when handling a custom tag and 0x0200 as the second word of the DE field. Impact details...

CVE-2022-41915

CVE-2022-41915 (Netty) : Netty versions 4.1.83.Final through 4.1.85.Final are affected. When calling DefaultHttpHeaders.set with an Iterator, header value validation was not performed, enabling HTTP Response Splitting via malicious iterator values. This is patched in 4.1.86.Final. Remediation/wor...

CVE-2023-5367

CVE-2023-5367 is an out-of-bounds write in xorg-x11-server, caused by an incorrect calculation of a heap buffer offset in XIChangeDeviceProperty (Xi/xiproperty.c) and RRChangeOutputProperty (randr/rrproperty.c). Affects the xorg-x11-server component across multiple Linux distributions; can lead t...

CVE-2023-5852

Summary of CVE-2023-5852 : A use-after-free in the Printing component of Google Chrome/Chromium prior to version 119.0.6045.105 could allow a remote attacker to trigger heap corruption by convincing a user to perform specific UI gestures. Impact is high (CVE-2023-5852 is associated with high base...

CVE-2016-10159

CVE-2016-10159 describes an integer overflow in phar_parse_pharfile() (ext/phar/phar.c) that affects PHP before 5.6.30 and 7.0.x before 7.0.15. A crafted PHAR archive with a truncated manifest can cause memory consumption growth or application crash (DoS). Public documents in Red Hat ALAS-2017-81...

CVE-2017-10346

CVE-2017-10346 is an OpenJDK/Java SE vulnerability affecting multiple OpenJDK components (Hotspot, OpenJDK sandboxes) across affected Java versions (OpenJDK6/7/8/9 in various advisories). The public records in connected documents indicate the issue includes bypassing Java sandbox restrictions via...

CVE-2018-14625

The CVE-2018-14625 entry describes a Linux kernel vulnerability in the vsock (AF_VSOCK) implementation. A race condition between connect() and close() can lead to a use-after-free that may enable a local attacker running inside a guest VM to read kernel memory (information leak) or potentially in...

CVE-2019-12979

CVE-2019-12979 : ImageMagick 7.0.8-34 contains a vulnerability in SyncImageSettings (MagickCore/image.c) caused by a use of an uninitialized value in AcquireImage. This can affect ImageMagick installations that process crafted images and is rated with partial impacts to confidentiality, integrity...

CVE-2019-16708

CVE-2019-16708 is an ImageMagick memory leak in magick/xwindow.c related to XCreateImage, observed in ImageMagick 7.0.8-35. The provided documents confirm the existence and location of the leak but do not specify a fixed version or remediation.

CVE-2019-3500

CVE-2019-3500 affects the download utility aria2 : when using --log, credentials (HTTP Basic username/password) can be written to a local log file, potentially exposing them to local users. The issue is tied to how aria2 handles logging rather than network flow, with vendor advisories and patch l...

CVE-2019-7577

CVE-2019-7577 affects SDL: a buffer over-read in audio/SDL_wave.c (SDL_LoadWAV_RW) linked to SDL 1.2.15 and 2.x up to 2.0.9. Connected advisories confirm multiple SDL-related CVEs with similar memory issues (buffer over-reads/overflows) across libsdl1.2/libsdl2 and SDL components, risking arbitra...

CVE-2020-28972

SaltStack Salt CVE-2020-28972 : A vulnerability in Salt before 3002.5 allows authentication to VMware vcenter, vSphere, and ESXi servers via the vmware.py code paths without always validating SSL/TLS certificates. The issue stems from improper certificate validation in the SSL/TLS verification fl...

CVE-2021-21996

CVE-2021-21996 affects SaltStack Salt prior to 3003.3. A user who controls the source and source_hash URLs can gain full filesystem access as root on a Salt minion. The connected Nessus/Gentoo GLSA entries corroborate the vulnerability in Salt and point to a remediation path: upgrade Salt to a ne...

CVE-2021-3475

OpenEXR vulnerability CVE-2021-3475 affects versions prior to 3.0.0-beta. A crafted EXR file processed by OpenEXR can trigger an integer overflow, with the greatest impact being reduced availability of the affected application. The connected Astra Linux and vendor advisories corroborate the same ...

CVE-2022-27387

CVE-2022-27387 affects MariaDB Server 10.7 and earlier, due to a global buffer overflow in the decimal_bin_size component exploitable via specially crafted SQL statements. The issue is documented across multiple advisories (e.g., Debian LTS, Amazon Linux advisories, and Astra Linux) and is mitiga...

CVE-2022-4283

CVE-2022-4283 affects the X.Org X server component handling keyboard name lookups (XkbGetKbdByName/XkbCopyNames). The provided documents link this issue to use-after-free/out-of-bounds conditions in Xkb-related code, potentially enabling local privilege elevation on privileged X servers and remot...

CVE-2023-0458

CVE-2023-0458 describes a speculative pointer dereference in the Linux kernel’s do_prlimit() path. The vulnerable path uses a controlled resource argument in pointer arithmetic for the rl im variable, enabling leakage of kernel contents when exploited. The Astra Linux security bulletin corroborat...

CVE-2023-3268

CVE-2023-3268 : An out-of-bounds memory access in Linux kernel relayfs (relay_file_read_start_pos in kernel/relay.c) could allow a local attacker to crash the system or leak kernel information. Connected advisories confirm this vulnerability and its remediation in multiple kernels: CloudLinux not...

CVE-2023-5728

CVE-2023-5728 : In the Firefox/Thunderbird stack, during garbage collection extra operations on an object that should not be touched could lead to a potentially exploitable crash. Affected: Firefox < 119, Firefox ESR < 115.4, and Thunderbird

CVE-2023-5855

CVE-2023-5855 is a Use-After-Free in Chromium/Google Chrome Reading Mode. A remote attacker could entice a user to perform specific UI gestures, potentially causing heap corruption. Affected versions are Chrome/Chromium prior to 119.0.6045.105. Mitigation: upgrade to 119.0.6045.105 or later (as r...

CVE-2014-5265

Technical details for CVE-2014-5265 are not publicly provided in the connected documents. The Initial Description mentions an XML entity expansion denial of service in IXR used by WordPress/Drupal. Monitor vendor advisories for updates.

CVE-2016-4447

CVE-2016-4447 affects libxml2 up to version before 2.9.4. The vulnerability is in the xmlParseElementDecl function (parser.c) where a crafted file via xmlParseName can cause a heap-based buffer underread, leading to denial of service (application crash). Remediation: upgrade to libxml2 2.9.4 or n...

CVE-2016-5419

CVE-2016-5419 affects curl/libcurl up to 7.50.1, where TLS session resumption is allowed even if the client certificate changed. This enables a remote attacker to bypass client-certificate checks by resuming a previously established session, potentially hijacking authentication. CVE-2016-5420 and...

CVE-2016-7068

PowerDNS (Authoritative Server and Recursor) pre-fix versions are affected by CVE-2016-7068, allowing remote, unauthenticated attackers to cause abnormal CPU usage by sending crafted DNS queries that trigger parsing of all records in a query, potentially leading to a partial DoS. Affected ranges ...

CVE-2017-8386

CVE-2017-8386 affects git-shell in Git prior to 2.12.3 (and upstreams) where command-line option handling allows a remote authenticated user to bypass restrictions by a repo name starting with a dash. The connected advisories confirm a restricted-shell bypass impacting multiple distros; mitigatio...

CVE-2018-1000078

CVE-2018-1000078 describes a Cross Site Scripting (XSS) vulnerability in RubyGems: gem server displays the homepage attribute and can execute injected scripts if a victim browses a malicious gem. Affected RubyGems before 2.7.6 (versions in the 2.x line) are vulnerable; the issue has been fixed in...

CVE-2018-11218

CVE-2018-11218 describes a memory corruption vulnerability in the Redis Lua subsystem’s cmsgpack handling, caused by stack-based buffer overflows. Affected Redis versions are before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2. Several connected sources reiter the issue as a Redis component ...

CVE-2018-19622

Wireshark MMSE dissector (CVE-2018-19622) could enter an infinite loop in versions 2.6.0–2.6.4 and 2.4.0–2.4.10 due to length overflow handling, addressed by epan/dissectors/packet-mmse.c. Remediation: upgrade to Wireshark 2.6.5 or newer (and related vendor advisories confirm the fix).

CVE-2018-19857

CVE-2018-19857 affects VideoLAN VLC media player 3.0.4 where the CAF demuxer in modules/demux/caf.c may read memory from an uninitialized pointer while processing CAF magic cookies due to a ReadKukiChunk() cast converting a negative value to unsigned int. This can cause denial of service and/or a...

CVE-2019-13762

CVE-2019-13762 relates to Google Chrome/Chromium on Windows, where insufficient policy enforcement in downloads could allow a local attacker to spoof downloaded files via local code. This is a local, low-severity (CVSS 3.1: 3.3; CVSS 2.0: 2.1) issue with limited impact if exploited. The documente...

CVE-2019-7573

CVE-2019-7573 affects SDL (1.2.15 and 2.x up to 2.0.9). The vulnerability is a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (within the wNumCoef loop). Exploitation could allow arbitrary code execution on affected hosts. Remediation is to upgrade SDL to a fixed release (SDL 1.2...