CVE-2019-13762

CVE-2019-13762 relates to Google Chrome/Chromium on Windows, where insufficient policy enforcement in downloads could allow a local attacker to spoof downloaded files via local code. This is a local, low-severity (CVSS 3.1: 3.3; CVSS 2.0: 2.1) issue with limited impact if exploited. The documente...

CVE-2019-7573

CVE-2019-7573 affects SDL (1.2.15 and 2.x up to 2.0.9). The vulnerability is a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (within the wNumCoef loop). Exploitation could allow arbitrary code execution on affected hosts. Remediation is to upgrade SDL to a fixed release (SDL 1.2...

CVE-2020-1746

CVE-2020-1746 affects Ansible Engine components (and Ansible Tower) where LDAP modules ldap_attr/ldap_entry can leak the LDAP bind password to stdout or logs when bind_pw is used. Versions vulnerable: Ansible 2.7.x before 2.7.17, 2.8.x before 2.8.11, 2.9.x before 2.9.7, and corresponding Ansible ...

CVE-2021-25633

CVE-2021-25633 affects The Document Foundation LibreOffice. It is an Improper Certificate Validation vulnerability where an attacker can create a digitally signed ODF document by manipulating documentsignatures.xml or macrosignatures.xml; LibreOffice may display a valid signature while the conten...

CVE-2021-28715

CVE-2021-28715 concerns the Linux kernel netback driver in Xen guests. The Xen netback path buffers incoming guest data until the guest processes it, and although there are safeguards to limit buffering, an attacker running in a guest can bypass them. Specifically, when using UDP on a fast interf...

CVE-2021-32490

CVE-2021-32490 affects djvulibre up to version 3.5.28 and earlier. A flaw causes an out-of-bounds write in DJVU::filter_bv() when processing crafted DjVu files, potentially crashing the application and causing other consequences. Public advisories confirm the issue and list related fixes/updates....

CVE-2021-36086

Summary: CVE-2021-36086 concerns the libsepol component used by SELinux, stemming from a use-after-free in the CIL compiler’s class-permission handling. The published records consistently describe the vulnerability as occurring in the CIL code path (cil_reset_classpermission) and related helper c...

CVE-2022-1897

CVE-2022-1897 is described in connected Astra Linux bulletin as an Out-of-bounds Write in vim/vim prior to 8.2. The bulletin confirms the issue type but does not provide vendor/version specifics beyond Vim before 8.2. Remediation (where documented) is to update Vim to fixed versions per affected ...

CVE-2023-3217

CVE-2023-3217 is a Use-After-Free in WebXR present in Google Chrome/Chromium prior to 114.0.5735.133, capable of heap corruption via a crafted HTML page. Affected products include Google Chrome/Chromium with the WebXR component; root cause is a use-after-free in the WebXR path. Impact is rated Hi...

CVE-2023-5859

CVE-2023-5859 affects Chromium-based browsers (notably Google Chrome) with a security UI flaw in Picture-in-Picture that allowed a remote attacker to spoof the domain via a crafted local HTML page. The issue’s impact is domain spoofing (low severity per NVD, CVSS 3.1: 4.3) and is fixed by updatin...

CVE-2014-5266

CVE-2014-5266 affects Drupal Core XML-RPC Endpoint xmlrpc.php. The DoS arises from how XML-RPC requests are processed, leading to very high CPU load and memory exhaustion. Affected: Drupal 6.x prior to 6.33 and Drupal 7.x prior to 7.31. Exploitation requires no authentication and is remote. Remed...

CVE-2015-3194

OpenSSL vulnerability CVE-2015-3194 affects OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e, where an RSA PSS ASN.1 signature missing a mask generation function parameter can allow a remote attacker to cause a denial of service (NULL pointer dereference and crash). Mitigation is to upgrade to...

CVE-2017-10810

CVE-2017-10810: Linux kernel memory leak in virtio_gpu_object_create (drivers/gpu/drm/virtio/virtgpu_object.c) up to 4.11.8 can cause memory exhaustion and denial of service when object initialisation fails. Connected Nessus advisories (Unity Linux UTSA-2026-002867/002763/000604) reproduce the sa...

CVE-2017-3157

CVE-2017-3157 affects Apache OpenOffice versions older than 4.1.4. The flaw arises in Calc/Writer when rendering embedded objects, enabling an attacker to craft a document that discloses files from the user’s filesystem (e.g., via hidden sections) and trick the user into saving/shipping the docum...

CVE-2017-3265

The connected advisories provide concrete details for CVE-2017-3265 in Oracle MySQL Server (Server: Packaging). Affected are MySQL Server subcomponent packaging with versions 5.5.53 and earlier, 5.6.34 and earlier, and 5.7.16 and earlier. Root cause: packaging/init scripts weakness enabling a hig...

CVE-2018-16151

CVE-2018-16151 affects strongSwan’s gmp plugin (RSA via GMP). The flaw is in verify_emsa_pkcs1_signature() where excess data after the encoded OID is not rejected during PKCS#1 v1.5 verification, enabling signature forgery when small public exponents are used and RSA is used for IKEv2 authenticat...

CVE-2018-18065

CVE-2018-18065 affects Net-SNMP before 5.8. The vulnerability is a NULL pointer dereference in _set_key within agent/helpers/table_container.c, which an authenticated attacker can exploit by sending a crafted UDP packet to remotely crash the SNMP service (DoS). Documented CVSS v3 base score is 6....

CVE-2018-19542

CVE-2018-19542 affects JasPer 2.0.14. The vulnerability is a NULL pointer dereference in jp2_decode (libjasper/jp2/jp2_dec.c) that leads to a denial of service. The connected documents confirm the issue and cite unpatched status on several Red Hat releases (RHEL 6/7/8) via Nessus entries, but do ...

CVE-2018-2761

CVE-2018-2761 affects the MySQL Server component (Client programs) of Oracle MySQL. Affected ranges are 5.5.59 and earlier, 5.6.39 and earlier, and 5.7.21 and earlier. It enables an unauthenticated, network-accessible attacker to cause the MySQL Server to hang or crash (partial DOS). The descript...

CVE-2018-2819

CVE-2018-2819 affects the MySQL Server component (InnoDB) of Oracle MySQL. Affected versions are 5.5.59 and earlier, 5.6.39 and earlier, and 5.7.21 and earlier. The vulnerability enables a low-privileged attacker with network access via multiple protocols to cause a hang or a frequent crash (comp...

CVE-2018-6554

CVE-2018-6554 describes a memory leak in the Linux kernel’s irda_bind path (net/irda/af_irda.c and later staging/irda/net/af_irda.c). A local user can cause memory exhaustion by repeatedly binding an AF_IRDA socket, leading to denial of service. The vulnerability exists in kernels prior to 4.17 a...

CVE-2018-8777

CVE-2018-8777 affects Ruby WEBrick: sending a large HTTP request or crafted body to WEBrick can cause memory-based denial of service. Affected Ruby branches include 2.2.x before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1. Mitigation is upgrading to the ...

CVE-2019-13761

CVE-2019-13761 affects Google Chrome/Chromium Omnibox UI, where a security UI flaw allowed domain spoofing via IDN homographs in crafted domain names. Root cause: incorrect security UI in Omnibox. Impact: remote attacker could spoof domains; no exploit details provided in the sources. Remediation...

CVE-2019-16713

CVE-2019-16713 affects ImageMagick 7.0.8-43, describing a memory leak in coders/dot.c (demonstrated by PingImage in MagickCore/constitute.c). Connected advisories confirm multiple ImageMagick CVEs; this entry notes a leak in the 7.0.8-43 release. No additional remediation details are provided in ...

CVE-2019-9200

CVE-2019-9200: A heap-based buffer underwrite in ImageStream::getLine() (Stream.cc) in Poppler 0.74.0 can be triggered by a crafted PDF sent to pdfimages, leading to Denial of Service (segmentation fault) or possibly other impact. Connected advisories enumerate the issue across affected packages,...

CVE-2020-11096

FreeRDP vulnerability CVE-2020-11096 affects FreeRDP up to version 2.1.2, caused by a global out-of-bounds (OOB) read in update_read_cache_bitmap_v3_order. The workaround is to disable bitmap cache (-bitmap-cache, which is the default). The issue is fixed in version 2.1.2. Related advisories conf...

CVE-2020-27560

CVE-2020-27560 affects ImageMagick 7.0.10-34. The vulnerability is a Division by Zero in OptimizeLayerFrames within MagickCore/layer.c, which may lead to a denial of service. The connected sources corroborate the issue location and impact for that ImageMagick version. There is no explicit remedia...

CVE-2021-21202

CVE-2021-21202: Use-after-free in Chrome extensions (extensions subsystem) prior to 90.0.4430.72 enables a crafted Chrome Extension to potentially escape the sandbox. Affected product: Google Chrome; root cause: use-after-free in extensions. Impact: sandbox escape risk. Remediation: update to Chr...

CVE-2021-3479

CVE-2021-3479 is a vulnerability in OpenEXR’s Scanline API. The flaw affects OpenEXR versions prior to 3.0.0-beta where processing a crafted EXR file can trigger excessive memory consumption, resulting in a denial of service (system availability impact). Connected advisories confirm real-world re...

CVE-2022-24836

CVE-2022-24836 affects Nokogiri, a Ruby HTML/XML parser. The issue is an inefficient regular expression used to detect encoding in HTML documents in versions = 1.13.4 (or applicable patches) as noted in multiple sources (Debian/Alpine/Amazon/DLA advisories and vendor notices). If upgrade is not p...

CVE-2022-3303

CVE-2022-3303 is a race-condition vulnerability in the Linux kernel sound subsystem (SNDCTL_DSP_SYNC ioctl) that can cause a NULL pointer dereference and denial of service via a locally privileged user. The issue affects the Linux kernel’s sound code path and can crash the system, potentially ena...

CVE-2022-38784

Poppler up to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg). Processing a crafted PDF or JBIG2 image could crash or allow arbitrary code execution. This issue is the same class as CVE-2022-38171 in Xpdf. Connected advisories (ALAS/ALSA, A...

CVE-2022-40768

CVE-2022-40768 affects the Linux kernel (through 5.19.9) where stex_queuecommand_lck does not memset for the PASSTHRU_CMD path, enabling local users to read kernel memory. Affected: drivers/scsi/stex.c in the kernel. Impact: information disclosure from kernel memory; local, low complexity, no use...

CVE-2023-4752

CVE-2023-4752 is a use-after-free in Vim’s ins_compl_get_exp() affecting Vim/vim before 9.0.1858. Connected advisories confirm the issue and list affected platforms/distributions (Debian, AlmaLinux, Amazon Linux, etc.). Remediation in publicly referenced notes is to upgrade Vim to a version conta...

CVE-2023-5853

CVE-2023-5853: A security-UI obfuscation vulnerability in Chromium-based browsers (Chrome/Chromium) before 119.0.6045.105; a crafted HTML page could mislead users in the Downloads UI. Remediation: upgrade to 119.0.6045.105 or newer.

CVE-2016-0773

CVE-2016-0773 affects PostgreSQL mainline before upgrades: 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1. The issue is an overflow/logic flaw in PostgreSQL’s regular expression handling, where an excessively large Unicode range in a bracket expressio...

CVE-2016-1248

Vim CVE-2016-1248 is a modeline input-validation vulnerability in which values for the 'filetype', 'syntax', and 'keymap' options could be exploited to execute arbitrary commands when a user opens a file containing a crafted modeline. Affected Vim versions could be compromised, and Neovim is also...

CVE-2017-10053

CVE-2017-10053 is an OpenJDK/OpenJDK 2D JPEGImageReader vulnerability. The issue affects Java SE components (Java SE, Java SE Embedded, JRockit) with affected versions including Java 6u151, 7u141, 8u131 (and 8u131 for Java SE Embedded; JRockit R28.3.14). The vulnerability could allow an unauthent...

CVE-2017-10107

CVE-2017-10107 affects OpenJDK/OpenJDK-based packages (RMI) with vulnerable components in Java SE/Java SE Embedded. The connected security data confirms multiple OpenJDK subcomponents are vulnerable, including RMI-related sandbox bypass issues, and lists affected versions such as Java 6u151, 7u14...

CVE-2018-10877

CVE-2018-10877 describes a vulnerability in the Linux kernel ext4 filesystem where an out-of-bounds access in ext4_ext_drop_refs() can be triggered by operating on a crafted ext4 image. The connected sources indicate a local attacker could mount or otherwise interact with a crafted ext4 image to ...

CVE-2018-10907

CVE-2018-10907 is a vulnerability in GlusterFS where the server-rpc-fopc.c code path allocates fixed-size buffers with alloca(3). An authenticated attacker mounting a Gluster volume could send a string longer than the fixed buffer, causing a stack-based overflow that may crash the glusterfs serve...

CVE-2018-2599

CVE-2018-2599 (Oracle Java SE/JRockit JNDI) affects Java SE 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded 8u151; JRockit R28.3.16. It is exploitable over network with unauthenticated access and can lead to partial data integrity/availability impact. Connected advisories corroborate multiple aff...

CVE-2018-2618

CVE-2018-2618 affects the Java cryptography (JCE) key-agreement in OpenJDK/OpenJDK-derived OpenJDK builds such as Java SE, Java SE Embedded, and JRockit. The connected sources describe insufficient strength of keys in the JCE component, enabling an unauthenticated attacker with network access to ...

CVE-2018-2796

CVE-2018-2796 causes unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency) in Oracle/OpenJDK Java SE. Affected: Java SE/Embedded and JRockit components with Java 7u171, 8u162 and 10, plus related JDK/JRE packages (e.g., OpenJDK builds) per the CVE references. I...

CVE-2018-5729

CVE-2018-5729 (and CVE-2018-5730) affects MIT Kerberos 5 (krb5) where an authenticated kadmin user with LDAP-principal-adding rights can cause a NULL pointer dereference or bypass a DN container check by supplying crafted data or DN arguments. The issue stems from insufficient validation in the K...

CVE-2019-1787

CVE-2019-1787 affects ClamAV’s PDF scanning; an out-of-bounds heap read can crash the engine, enabling DoS when processing crafted PDFs. Affects 0.101.1 and earlier. Public references indicate the issue stems from improper tracking of remaining buffer bytes during indexing, leading to a heap read...

CVE-2019-25034

CVE-2019-25034 concerns the Unbound DNS resolver. The connected documents confirm a vulnerability in the function sldns_str2wire_dname_buf_origin that can cause an integer overflow and an ensuing out-of-bounds write in Unbound builds prior to 1.9.5. The vendor disputes this is a vulnerability, no...

CVE-2019-3901

CVE-2019-3901 describes a race condition in perf_event_open() that can leak data from setuid processes. The root cause is that cred_guard_mutex is not held during the ptrace_may_access() check, allowing a target task to execve() with setuid execution before perf_event_alloc() attaches, bypassing ...

CVE-2020-10177

CVE-2020-10177 affects Pillow prior to 7.1.0, with multiple out-of-bounds reads in libImaging/FliDecode.c. Technical details across connected advisories confirm affected package is python-pillow and fixes are provided in Pillow 7.1.0+ (e.g., ALAS-2024-2648, ALAS2 advisories; Mageia notes referenc...

CVE-2020-12672

GraphicsMagick up to 1.3.35 is affected by a heap-based buffer overflow in ReadMNGImage (coders/png.c) per CVE-2020-12672. Remediation observed in multiple advisories is to upgrade GraphicsMagick to a newer version (e.g., 1.3.38 or later, per GLSA-202209-19; DLA-2902 update; openSUSE patch). The ...