CVE-2021-29338

CVE-2021-29338 is an OpenJPEG 2.4.0 vulnerability: an integer overflow in the OpenJPEG library (openjp2/pi.c / related code paths) can be triggered by a directory with a very large number of files (example: 1,048,576) passed via the -ImgDir option, leading to a denial of service (crash). The issu...

CVE-2021-29473

Exiv2 (library/CLI) is affected by CVE-2021-29473 due to an out-of-bounds read when writing metadata into a crafted image, triggered in Exiv2 prior to 0.27.4. The issue specifically concerns Exiv2::Jp2Image::doWriteMetadata, allowing a potential denial of service via crashing the application when...

CVE-2021-32558

The CVE-2021-32558 issue affects Sangoma Asterisk and Certified Asterisk: IAX2 channel driver may crash when receiving a packet with an unsupported media format. Affected versions include Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, 18.x before 18.5.1, and Certified Aste...

CVE-2021-35267

NTFS-3G is affected by CVE-2021-35267 for versions older than 2021.8.22. The issue is a stack/heap buffer overflow in MFT/MFTMirror handling that can enable code execution or privilege escalation when setuid-root. Connected advisories from Astra Linux and Alpine Linux confirm the

CVE-2021-43784

CVE-2021-43784 affects runc prior to 1.0.3, where a 16‑bit length field overflow in netlink bytemsg allowed an attacker who can influence container configuration to have the parsed payload override netlink-based container configuration and disable namespaces. Impact: potential namespace bypass by...

CVE-2022-23614

CVE-2022-23614 — Twig sandbox bypass via sort filter . In Twig’s sandbox mode, the sort filter’s arrow parameter must be a closure; in affected versions this constraint was not properly enforced, allowing code injection of arbitrary PHP when the filter was misused (e.g., passing a function name l...

CVE-2022-42890

CVE-2022-42890 is a vulnerability in Apache Batik (XML Graphics Project) that allows an attacker to run arbitrary Java code from untrusted SVG via JavaScript. The issue affects Apache Batik prior to version 1.16; multiple advisories note upgrading to 1.16 or newer as the remediation (e.g., Debian...

CVE-2023-28466

Summary: CVE-2023-28466 affects the Linux kernel up to 6.2.6, where do_tls_getsockopt in net/tls/tls_main.c can race due to a missing lock_sock, causing a use-after-free or NULL pointer dereference. The condition is a local, kernel‑level issue with potential crashes or memory corruption as descri...

CVE-2023-5851

CVE-2023-5851 describes an insecure/incorrect implementation in Downloads of Google Chrome (Chromium) prior to 119.0.6045.105, which allowed a remote attacker to obfuscate the security UI via a crafted HTML page. Public references in the connected documents confirm the issue affects Chromium-base...

CVE-2017-18249

CVE-2017-18249 affects the Linux kernel’s f2fs implementation: the add_free_nid function in fs/f2fs/node.c fails to properly track an allocated nid, enabling local attackers to cause a denial of service via a race condition (and potentially other impact) when multiple threads run concurrently. Af...

CVE-2017-9075

CVE-2017-9075 affects the Linux kernel network subsystem: the sctp_v6_create_accept_sk function in net/sctp/ipv6.c mishandles inheritance, enabling a local attacker to cause a denial of service (and possibly other effects) via crafted system calls. Connected CentOS Red Hat advisories (e.g., CESA/...

CVE-2018-1000877

CVE-2018-1000877 is a double-free in libarchive’s RAR decoder (parse_codes in archive_read_support_format_rar.c) that can crash the process or enable a DoS when a victim opens a specially crafted RAR file. The issue occurs when realloc(rar->lzss.window, new_size) is invoked with new_size = 0. ...

CVE-2018-10904

CVE-2018-10904 affects GlusterFS servers. The vulnerability arises from improper sanitization of file paths in the trusted.io-stats-dump extended attribute used by the debug/io-stats translator. An attacker with sufficient access to modify extended attributes on a Gluster volume can create files ...

CVE-2018-10911

CVE-2018-10911 affects glusterfs; the dict_unserialize function mishandles negative key length values, allowing a remote attacker to read memory from other locations into the stored dict value. The IBM PowerKVM advisory (and related Red Hat/CentOS/Debian advisories) document remote-authenticated/...

CVE-2018-10914

CVE-2018-10914 is a GlusterFS vulnerability where an attacker can issue a xattr request via glusterfs FUSE to crash the gluster brick process, and if multiplexing is enabled, cause crashes across multiple bricks and volumes, enabling a remote denial of service. The issue is documented across mult...

CVE-2018-17581

CVE-2018-17581 is associated with Exiv2 0.26. The vulnerability arises from excessive stack consumption caused by a recursive function in CiffDirectory::readDirectory() implemented in crwimage_int.cpp, leading to a denial of service. The connected documents corroborate a DoS impact for this CVE, ...

CVE-2018-18897

CVE-2018-18897 refers to a memory leak in Poppler 0.71.0’s GfxColorSpace::setDisplayProfile (GfxState.cc), demonstrated by pdftocairo. The issue is documented across multiple advisories in the connected documents, confirming the component (Poppler), vulnerable function, and affected version. The ...

CVE-2018-19873

CVE-2018-19873 affects Qt up to version 5.11.2 (before 5.11.3): QBmpHandler can overflow a buffer when processing BMP data, leading to a potentially exploitable crash or arbitrary code execution as implied by the CVE entry. Public mentions across advisories (e.g., F5 K08037765, K42941419, Debian/...

CVE-2019-13744

CVE-2019-13744 affects Google Chrome before 79.0.3945.79, where insufficient policy enforcement in cookies could enable a remote attacker to leak cross-origin data via a crafted HTML page. The issue is rooted in cookie policy handling within Chrome; several advisories reference this CVE as part o...

CVE-2019-18928

CVE-2019-18928 affects Cyrus IMAP server (Cyrus IMAPD) in 2.5.x before 2.5.14 and 3.x before 3.0.12. The vulnerability allows privilege escalation because an HTTP request may be interpreted in the authentication context of a previous request that arrived on the same connection. This is a server-s...

CVE-2020-11038

FreeRDP CVE-2020-11038 affects versions

CVE-2021-21208

CVE-2021-21208 affects Google Chrome/Chromium’s QR scanner. Root cause: insufficient data validation in the QR code scanner on iOS prior to 90.0.4430.72, enabling a crafted QR code to induce domain spoofing. Affected versions are Chrome/Chromium before that build. Remediation: upgrade to Chromium...

CVE-2021-32491

CVE-2021-32491 affects djvulibre

CVE-2021-42096

CVE-2021-42096 affects GNU Mailman before 2.1.35 where a CSRF token is derived from the admin password, enabling offline brute-force attacks and contributing to remote privilege escalation. Related advisories (CVE-2021-42097, CVE-2021-44227) describe additional CSRF/token issues and password-rela...

CVE-2022-0443

CVE-2022-0443 affects Vim (vim/vim) prior to 8.2. The flaw is a use-after-free involving freed memory, potentially allowing a crafted file to crash Vim or corrupt memory. Public documents describe the vulnerability in that context but do not provide exploit specifics, affected product versions be...

CVE-2022-47318

CVE-2022-47318 affects the ruby-git library. Vulnerable in versions prior to v1.13.0, it allows a remote authenticated attacker to execute arbitrary Ruby code by loading a repository containing a specially crafted filename. Several advisories confirm this issue alongside CVE-2022-46648, with Debi...

CVE-2024-26777

CVE-2024-26777 concerns Linux kernel fbdev drivers (sis and savage) where pixclock may be used as a divisor before being validated, enabling a divide-by-zero error via user-supplied ioctl values. The root cause is that pixclock is used in calculations (e.g., drate) before a zero check, with fixes...

CVE-2008-4098

CVE-2008-4098 affects MySQL (older 5.0.x) where an attacker with CREATE/ DROP privileges could bypass privilege checks by issuing CREATE TABLE on a MyISAM table with modified DATA DIRECTORY or INDEX DIRECTORY arguments tied to pathnames without symlinks, potentially referencing a table created la...

CVE-2017-10109

CVE-2017-10109 concerns a serialization flaw in Oracle/OpenJDK Java SE components (Java SE, Java SE Embedded, JRockit). The vulnerability, tied to the Serialization subcomponent, can allow an unauthenticated, network-scoped attacker to trigger a denial of service (partial DoS) by loading untruste...

CVE-2018-10873

CVE-2018-10873 affects SPICE before 0.14.1: a missing bounds check in demarshal.py:write_validate_array_item can be exploited by an authenticated remote peer to crash the SPICE client/server. Public advisories (Debian, IBM, Mageia/CentOS) describe denial of service and potential code execution im...

CVE-2018-18873

CVE-2018-18873 affects JasPer 2.0.14 with a NULL pointer dereference in ras_putdatastd (ras_enc.c), which can cause a crash. The Connected documents confirm the vulnerability and its presence in JasPer 2.0.14 but do not provide a specific patch version or remediation details in the supplied mater...

CVE-2018-19134

CVE-2018-19134 affects Artifex Ghostscript (through 9.25). The setpattern operator mishandles certain types, causing a type-confusion in the pattern dictionary implementation. This could crash Ghostscript or potentially allow arbitrary code execution within the Ghostscript process when processing...

CVE-2018-19758

CVE-2018-19758 affects libsndfile 1.0.28 with a heap-based buffer over-read in wav.c: wav_write_header, leading to denial of service. Multiple advisories indicate a fix is available via upgraded libsndfile packages (examples: Debian/ Mageia advisories citing updates to address this issue; Mariner...

CVE-2018-20151

CVE-2018-20151 affects WordPress prior to 4.9.9 and 5.x prior to 5.0.1. The vulnerability allows a search-engine crawler to access the user activation page under certain configurations, enabling indexing/display of a user’s email address and, rarely, the default-generated password. CVSS data from...

CVE-2018-20152

Affected software: WordPress (before 4.9.9 and before 5.0.1 in the 5.x branch). Vulnerability: CVE-2018-20152 allows bypassing restrictions on post types via crafted input, enabling authors to create or manipulate posts beyond intended types. Root cause: improper validation of post-type restricti...

CVE-2018-6594

CVE-2018-6594 affects PyCrypto before or up to 2.6.1 due to weak ElGamal key parameter generation in lib/Crypto/PublicKey/ElGamal.py. This flaw breaks semantic security: under ciphertext-only attack an adversary could obtain plaintext information from ciphertext, as the Decisional Diffie-Hellman ...

CVE-2019-10899

CVE-2019-10899 affects Wireshark: SRVLOC dissector could crash due to a heap-based buffer under-read. The issue was fixed by a code change in epan/dissectors/packet-srvloc.c that prevents the under-read. Affected ranges include Wireshark 2.4.0–2.4.13, 2.6.0–2.6.7, and 3.0.0, with remediation in s...

CVE-2019-25032

Unbound (pre-1.9.5) contains an integer overflow in the regional allocator (regional_alloc). The vendor disputes this as a vulnerability, and a running Unbound installation is not remotely or locally exploitable per the cited descriptions. Connected advisories note multiple CVEs in Unbound and re...

CVE-2019-25041

Unbound (DNS resolver) prior to 1.9.5 contains an assertion failure in dname_pkt_copy when handling compressed names. The CVE entry notes the vendor disputes this as a vulnerability, and a running Unbound installation cannot be remotely or locally exploited according to the description. Connected...

CVE-2019-9498

CVE-2019-9498 concerns the EAP-PWD implementation in hostapd EAP Server and the EAP-pwd support in wpa_supplicant with SAE. The issue: when built against crypto libraries that do not validate imported elements, the scalar and element values presented in EAP-pwd-Commit are not validated. An attack...

CVE-2020-11030

CVE-2020-11030 affects WordPress blocks/search handling. A crafted payload can cause scripts to run within the block editor search block when an authenticated user with content-adding rights is present. The vulnerability is mitigated by upgrading to WordPress 5.4.1 or applying the listed minor re...

CVE-2020-15863

CVE-2020-15863 affects QEMU pre-07-20-2020, in the XGMAC Ethernet controller (hw/net/xgmac.c). A buffer overflow during packet transmission can allow a guest user/process to crash the QEMU host process, yielding denial of service or potential privilege escalation, specifically impacting the highb...

CVE-2020-3702

CVE-2020-3702 affects the Linux kernel (ath9k wireless driver) and can lead to information disclosure via specially crafted WLAN traffic. Multiple connected sources confirm the flaw in the Atheros IEEE 802.11n chipsets driver and its potential for information leakage. Debian LTS advisories (DSA-4...

CVE-2020-8163

CVE-2020-8163 is a code injection vulnerability in Rails prior to 5.0.1 where an attacker who controls the locals argument of a render call can achieve remote code execution (RCE). Affected software is Ruby on Rails before 5.0.1; exploitation and public proof-of-concept/exploit code exist (e.g., ...

CVE-2021-32493

CVE-2021-32493 affects djvulibre up to version 3.5.28 and earlier, with a heap buffer overflow in DJVU::GBitmap::decode() when processing crafted DjVu files. Impact per sources ranges from application crash to potential arbitrary code execution in some advisories. Remediation is to upgrade/downgr...

CVE-2021-3928

Technical details about CVE-2021-3928 are not provided in the connected documents. Monitor for updates from Debian/Red Hat advisories and vendor advisories for precise root cause, affected versions, and fixes.

CVE-2022-23041

The connected Astra Linux entries link CVE-2022-23041 to Linux PV device frontends (blkfront, netfront, scsifront, gntalloc, xenbus) that use grant-table interfaces to drop backend access. The issue arises from race conditions when removing grant access: if a backend has mapped the granted page b...

CVE-2022-27383

CVE-2022-27383 affects MariaDB Server v10.6 and below, with a use-after-free in my_strcasecmp_8bit triggerable by specially crafted SQL statements. Connected advisories confirm this issue across MariaDB 10.6 and earlier, and note remediation generally involves updating to a fixed upstream release...

CVE-2023-5186

CVE-2023-5186 is a use-after-free vulnerability in Chromium-based browsers (Google Chrome and Chromium) prior to 117.0.5938.132. The issue lies in Passwords handling, where a crafted UI interaction can lead to a heap corruption through a use-after-free condition, potentially enabling arbitrary co...

CVE-2024-32487

CVE-2024-32487 affects the less utility. The issue allows OS command execution via a newline character in a file name due to faulty quoting in filename.c (affecting versions up to 653). Exploitation typically requires attacker-controlled file names (e.g., from an untrusted archive) and the LESSOP...