10003 matches found
CVE-2017-3651
CVE-2017-3651 affects Oracle MySQL Server’s Client mysqldump component. Affected releases include 5.5.56 and earlier, 5.6.36 and earlier, and 5.7.18 and earlier. The issue is described in multiple advisories as a vulnerability that enables a low-privileged, network-accessing attacker to perform u...
CVE-2018-10923
CVE-2018-10923 affects GlusterFS server. The description in the connected documents shows that the vulnerability arises from the mknod(2) pathway, allowing an authenticated attacker to create device files on a GlusterFS server node and read data from any device attached to the server. This indica...
CVE-2018-11780
Apache SpamAssassin is affected by CVE-2018-11780 due to a potential Remote Code Execution in the PDFInfo plugin prior to version 3.4.2. Connected sources confirm SpamAssassin and PDFInfo as the vulnerable components, with upstream/vendors recommending upgrading to 3.4.2 or newer to mitigate. The...
CVE-2018-14622
libtirpc has a null-pointer dereference vulnerability (CVE-2018-14622) prior to version 0.3.3-rc3. The code path around makefd_xprt() does not always check return values, which can lead to a crash when the server hits the maximum number of file descriptors. A remote attacker could trigger a denia...
CVE-2018-19108
CVE-2018-19108 affects Exiv2 0.26 and its PSD image reader: Exiv2::PsdImage::readMetadata can trigger a denial of service via an infinite loop caused by an integer overflow when processing crafted PSD files. Connected sources (multiple Nessus/ADS references) explicitly enumerate the vulnerability...
CVE-2018-19132
CVE-2018-19132 : In Squid, a memory leak occurs when SNMP is enabled, exploitable via SNMP packets to cause denial of service by resource exhaustion. Public advisories confirm a fix in newer Squid releases across multiple distros (e.g., Debian squid3 updates, Mageia 2018-0458, Amazon ALAS/SR pack...
CVE-2019-10903
Wireshark DCERPC SPOOLSS dissector (CVE-2019-10903) could crash in Wireshark 2.4.0–2.4.13, 2.6.0–2.6.7, and 3.0.0. The root cause was a missing boundary check in epan/dissectors/packet-dcerpc-spoolss.c. A fix was implemented by adding a boundary check in that module, mitigating the crash. Connect...
CVE-2019-9208
Wireshark CVE-2019-9208 affects the TCAP dissector in Wireshark 2.4.0–2.4.12 and 2.6.0–2.6.6, where a NULL pointer dereference could cause a crash. The issue is described in epan/dissectors/asn1/tcap/tcap.cnf; the root cause is dereferencing a NULL pointer within the TCAP dissector processing. Th...
CVE-2019-9741
CVE-2019-9741 affects Go’s net/http in Go 1.11.5, enabling CRLF injection when an attacker controls a URL parameter. The issue arises from constructing an HTTP request with http.NewRequest where a CRLF sequence can precede a header or Redis command, allowing potential header injection and related...
CVE-2020-0198
The CVE-2020-0198 entry concerns the libexif library used on Android-10. The issue is in exif_data_load_data_content of exif-data.c, where an integer overflow can trigger a UBSAN abort, potentially enabling remote denial of service with no additional execution privileges. Exploitation requires us...
CVE-2020-27814
CVE-2020-27814 is a heap-buffer overflow in OpenJPEG’s openjpeg2 handling of certain PNG inputs. The issue can cause application crashes or, in some cases, arbitrary code execution with user privileges. Affected packages across distributions include openjpeg2 and related libs, with mitigations/pa...
CVE-2020-4033
CVE-2020-4033 : In FreeRDP before 2.1.2, there is an out-of-bounds read in RLEDECOMPRESS. All FreeRDP-based clients with sessions at color depth
CVE-2021-20244
ImageMagick vulnerability CVE-2021-20244 affects MagickCore/visual-effects.c. A crafted file processed by ImageMagick can trigger undefined behavior via division by zero, with the highest stated impact on availability. The connected documents confirm the flaw location and nature but do not provid...
CVE-2021-39251
CVE-2021-39251 affects NTFS-3G: a crafted NTFS image can trigger a NULL pointer dereference in ntfs_extent_inode_open. Affected versions are NTFS-3G before 2021.8.22. Reports across multiple distributions confirm the issue and indicate fixes in 2021.8.22+. Impact is NULL pointer dereference (poss...
CVE-2021-41229
BlueZ contains a memory-leak vulnerability in the SDP path (sdp_cstate_alloc_buf) that can cause the service to be exhausted if an attacker continuously sends SDP packets. The issue is described across multiple advisories as affecting BlueZ and being mitigated by upgrading to patched BlueZ packag...
CVE-2022-25375
CVE-2022-25375 affects the Linux kernel rndis gadget: the RNDIS_MSG_SET size is not validated, allowing information disclosure from kernel memory. Affected: kernels prior to 5.16.10. Remediation: apply upstream patch in 5.16.10+; Debian advisories note fixes in stable branches (e.g., 5.10.x/Bulls...
CVE-2024-26984
CVE-2024-26984 is a Linux kernel issue affecting the nouveau GPU driver where a race around pointer stores in instmem (ptrs) can yield a NULL pointer dereference under contention. The root cause is a race between nv50_instobj_acquire/refcount_set and concurrent refcount_inc_not_zero, which may le...
CVE-2025-38352
CVE-2025-38352: In the Linux kernel, a TOCTOU race affects posix-cpu-timers between handle_posix_cpu_timers() and posix_cpu_timer_del() when an exiting non-autoreaping task runs from IRQ. The fix adds a tsk->exit_state check into run_posix_cpu_timers() to prevent misdetection of timer->it.c...
CVE-2016-6318
CVE-2016-6318 is a stack-based buffer overflow in cracklib’s FascistGecosUser (lib/fascist.c) that can be triggered by parsing an overly long GECOS field, allowing a local attacker to crash the application or gain privileges. Multiple connected sources confirm the issue and reference the same roo...
CVE-2017-10101
CVE-2017-10101 is a concrete OpenJDK/OpenJDK JAXP vulnerability. Affected: Java SE (6u151, 7u141, 8u131) and Java SE Embedded (8u131). Issue: untrusted code loaded in sandboxed deployments can bypass protections and lead to full takeover of Java SE/Embedded via JAXP. Exploitation is network-based...
CVE-2017-13088
CVE-2017-13088 is part of the KRACK family affecting WPA/WPA2 (802.11) where reinstallation of the Integrity Group Temporal Key (IGTK) can occur while processing a Wireless Network Management Sleep Mode Response frame. The flaw enables an attacker within radio range to replay frames between APs a...
CVE-2018-14662
CVE-2018-14662 affects Ceph up to version 13.2.3 (pre-13.2.4). The vulnerability allows authenticated Ceph users with read-only permissions to steal dm-crypt encryption keys used for Ceph disk encryption. This is the underlying flaw reported across multiple advisories and repository releases (not...
CVE-2019-0222
CVE-2019-0222 affects Apache ActiveMQ 5.0.0–5.15.8. Description: unmarshalling of a corrupt MQTT frame can cause a broker Out of Memory, rendering the broker unresponsive. Enterprise/Nessus entries in the connected docs classify this as an unpatched/vulnerable issue with no vendor patch available...
CVE-2019-17402
Exiv2 0.27.2 has a vulnerability where Exiv2::getULong in types.cpp can crash when invoked from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp due to missing validation of total size against offset/size. The issue is triggered by CRW processing and results in a crash/denial of ...
CVE-2019-19816
CVE-2019-19816 affects the Linux kernel 5.0.21: mounting a crafted btrfs image can trigger a slab-out-of-bounds write in __btrfs_map_block in fs/btrfs/volumes.c due to mishandling of the data stripes value = 1. The connected Nessus advisory blocks (Unity Linux UTSA-2026-004332 and related plugin ...
CVE-2019-5765
CVE-2019-5765 is described in the connected documents as an access restriction bypass (policy enforcement error) in the Chromium browser prior to version 72.0.3626.81. Fedora Arch/Linux advisories and Debian security trackers list this CVE among Chromium issues resolved by upgrading to 72.0.3626....
CVE-2020-13753
The CVE-2020-13753 entry concerns the bubblewrap sandbox used by WebKitGTK and WPE WebKit. Connected sources (e.g., Debian DSA-4724-1) confirm that before version 2.28.3 the bubblewrap sandbox failed to block CLONE_NEWUSER and the TIOCSTI ioctl, enabling sandbox escape: CLONE_NEWUSER could allow ...
CVE-2020-13848
CVE-2020-13848 affects Portable UPnP SDK (libupnp) 1.12.1 and earlier. The vulnerability is a NULL pointer dereference in FindServiceControlURLPath and FindServiceEventURLPath inside genlib/service_table/service_table.c, exploitable via crafted SSDP messages to cause a denial of service (crash). ...
CVE-2020-14928
CVE-2020-14928 affects evolution-data-server (EDS) up to version 3.36.3. The issue is a STARTTLS buffering flaw in SMTP/POP3: when a server sends a begin TLS response, EDS reads extra data and evaluates it in a TLS context, enabling potential response injection with impact on integrity as per the...
CVE-2020-25625
QEMU before 5.2.0 is vulnerable to an infinite loop in the USB OHCI emulator (hw/usb/hcd-ohci.c) when a TD list contains a loop, potentially allowing a guest or host process to exhaust CPU or cause a denial of service. The issue is observed in QEMU 5.0.0; remediation is to upgrade to 5.2.0 or new...
CVE-2021-3474
OpenEXR vulnerability CVE-2021-3474 affects OpenEXR versions before 3.0.0-beta. A crafted EXR file can trigger a shift overflow in FastHufDecoder, leading to availability impact (DoS) for affected applications. The connected documents confirm the flaw and mention mitigation via upgrading to 3.0.0...
CVE-2021-45469
CVE-2021-45469 affects the Linux kernel’s f2fs file system implementation, specifically __f2fs_setxattr in fs/f2fs/xattr.c. When an inode’s last xattr entry is invalid, there is an out-of-bounds memory access. Documents indicate an attacker who can mount a crafted f2fs image could trigger denial ...
CVE-2022-0629
CVE-2022-0629 affects Vim (vim/vim) prior to 8.2. The connected Cloud Foundry USN advisory notes a stack-based buffer overflow in vim's ga_concat_shorten_esc() in src/testing.c that can be triggered by opening a crafted file, potentially crashing the editor and causing a denial of service (no exp...
CVE-2022-2129
CVE-2022-2129 affects vim/vim with an out-of-bounds write in the codebase prior to 8.2. Debian and Debian LTS advisories (DLA-3204-1, DLA-4097-1) note fixes in vim packages: Debian 10 up to 8.1.0875-5+deb10u4 and Debian 11 via vim-9.x packages (e.g., 2:8.2.2434-3+deb11u3). Astra/Cloud Foundry ref...
CVE-2022-23515
Concerning CVE-2022-23515, Loofah (Ruby library for HTML/XML sanitization, built on Nokogiri) is vulnerable in versions >= 2.1.0 and
CVE-2022-3586
CVE-2022-3586 : A use-after-free in the Linux kernel networking path (sch_sfb enqueue function using SKB cb field after enqueueing/freeding into a child qdisc) allows a local, unprivileged user to crash the system, causing a denial of service. Affected component: kernel networking code; root caus...
CVE-2022-45939
The CVE-2022-45939 issue affects GNU Emacs up to version 28.2. The root cause is in lib-src/etags.c using the system() C library call to invoke the external ctags/etags binary, enabling local command execution when file names contain shell metacharacters (example: using commands like ctags *) in ...
CVE-2022-48554
CVE-2022-48554 affects the file utility (the Open Source project named “File”) with a stack-based buffer over-read in file_copystr() in funcs.c, before version 5.43. The issue can cause denial of service or potentially memory corruption. Affected distributions/contexts include Apple platforms (ma...
CVE-2023-2137
The provided connected docs confirm CVE-2023-2137 affects Google Chrome/Chromium and its underlying SQLite component, with a heap buffer overflow in SQLite prior to Chrome 112.0.5615.137. The root cause is a heap corruption condition that could be triggered by a crafted HTML page, allowing remote...
CVE-2023-42756
CVE-2023-42756 is a Linux kernel vulnerability in the Netfilter/IPSET subsystem caused by a race between IPSET_CMD_ADD and IPSET_CMD_SWAP that can lead to a kernel panic and local system crash. The description indicates a local attacker may crash the machine due to calling __ip_set_put on a wrong...
CVE-2023-5857
CVE-2023-5857 affects Google Chrome/Chromium: an inappropriate implementation in the Downloads component allowed a remote attacker to potentially execute arbitrary code via a malicious file. The issue is tied to Chromium’s handling in Downloads prior to 119.0.6045.105. Public disclosures in conne...
CVE-2023-6346
CVE-2023-6346 is a use-after-free in WebAudio within Chromium-based browsers, enabling potential heap corruption. The vulnerability affects Chromium and derivatives (e.g., Google Chrome) prior to version 119.0.6045.199. Multiple connected advisories confirm the fix in version 119.0.6045.199 or ne...
CVE-2024-26808
The CVE-2024-26808 issue affects the Linux kernel netfilter nft_chain_filter logic. When NETDEV_UNREGISTER is reported, the fix removes the netdevice from the inet/ingress basechain to prevent a stale reference in the hook list. The vulnerability is exploitable locally (attack vector LOCAL) with ...
CVE-2015-2721
CVE-2015-2721 (NSS) arises from NSS not correctly handling TLS state machine transitions, allowing a MITM to bypass forward secrecy by blocking the ServerKeyExchange message (the SMACK SKIP-TLS issue). Affected: NSS libraries used by Mozilla Firefox/Thunderbird and related products; impact includ...
CVE-2017-10096
CVE-2017-10096 – OpenJDK/JAXP vulnerability (CWE-style) shows a flaw in the Java SE/Java SE Embedded stack, specifically the JAXP component. Affected are Oracle Java SE versions 6u151, 7u141, 8u131 and Java SE Embedded 8u131. The vulnerability can allow an unauthenticated attacker with network ac...
CVE-2017-10349
CVE-2017-10349 affects the OpenJDK/JAXP component (Java SE and Java SE Embedded) where the vulnerability stems from unbounded memory growth during object creation from serialized data, enabling unauthenticated network access to cause a partial denial of service. Multiple connected advisories (IBM...
CVE-2017-10357
CVE-2017-10357 is a Java SE/OpenJDK vulnerability affecting the Serialization component in Oracle Java SE and Java SE Embedded. The Initial document lists affected versions as Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. The Connected documents corroborate multiple OpenJDK/OpenJDK...
CVE-2017-17789
CVE-2017-17789 affects GIMP 2.8.22 with a heap-based buffer overflow in read_channel_data (plug-ins/common/file-psp.c) used when parsing PSP files. The issue is documented across multiple advisories and vendor notices, including openSUSE and Red Hat/Nessus entries, which reference a PSP importer ...
CVE-2018-11759
CVE-2018-11759 affects the Apache Tomcat JK Connector (mod_jk) when used with Apache httpd: connector versions 1.2.0 through 1.2.44, due to edge-case handling in httpd path normalization, could allow exposure of application functionality via the reverse proxy and may bypass httpd access controls....