10005 matches found
CVE-2020-24616
The CVE-2020-24616 vulnerability affects FasterXML jackson-databind 2.x prior to 2.9.10.6, arising from the interaction between serialization gadgets and typing (related to br.com.anteros.dbcp.AnterosDBCPDataSource). Root cause is unsafe deserialization via Gadget chains in Jackson Databind. Impa...
CVE-2021-20288
Ceph CVE-2021-20288 is an authentication flaw in Ceph before certain fixed releases. The root cause is that CEPHX_GET_AUTH_SESSION_KEY handling does not sanitize other_keys, allowing reuse of old keys when a global_id is requested, enabling a user to leverage a global_id previously associated wit...
CVE-2021-21223
CVE-2021-21223 describes an integer overflow in Mojo inside Google Chrome prior to 90.0.4430.85. A remote attacker who has compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. Affected: Google Chrome (Mojo component) before 90.0.4430.85. Impact per ...
CVE-2021-28091
CVE-2021-28091 affects the Lasso library. All versions prior to 2.7.0 are vulnerable due to improper verification of a cryptographic signature in SAML/XML signature processing, which can allow manipulation of SAML responses and potential impersonation. Remediation is to upgrade to version 2.7.0 o...
CVE-2021-33287
NTFS-3G contains a heap buffer overflow in ntfs_attr_pread_i when reading specially crafted NTFS attributes, affecting versions
CVE-2022-2000
CVE-2022-2000 is an Out-of-bounds Write affecting vim in Vim 8.2 before 8.2.2434. Debian LTS advisory DLA-3204-1 and Debian security notes document the fix: vim version 2:8.2.2434-3+deb11u3 for Debian 11 (bullseye) addresses CVE-2022-2000, with multiple other CVEs also patched in that update. Ast...
CVE-2023-5380
CVE-2023-5380 is a use-after-free in the xorg-x11-server (DestroyWindow path) that can crash the X server in Zaphod mode (multi-screen with multiple protocol screens). The issue is reported within the same family of xorg-x11-server memory-safety bugs, with the given CVSSv3.1 vector indicating Loc...
CVE-2023-5472
CVE-2023-5472 describes a use-after-free in Chrome/Chromium Profiles prior to 118.0.5993.117, enabling heap corruption via a crafted HTML page for a remote attacker. Impact is high (CVE has base score 8.8). Affected software includes Google Chrome/Chromium; Debian advisories confirm fixed version...
CVE-2023-5724
The connected Astra Linux bulletin confirms CVE-2023-5724: Drivers are not always robust to extremely large draw calls, potentially causing crashes in Firefox before 119, Firefox ESR before 115.4, and Thunderbird before 115.4.1. Affected versions are Firefox <119, Firefox ESR <115.4, Thunde...
CVE-2017-13672
CVE-2017-13672 affects QEMU when built with VGA display emulator support. A local privileged user can trigger an out-of-bounds read during VGA display update, crashing the QEMU process and causing DoS. Public advisories confirm vga-related fix in qemu-kvm components (e.g., ALAS-2018-1034, CESA-20...
CVE-2018-10850
CVE-2018-10850 affects 389-ds-base prior to versions 1.4.0.10 and 1.3.8.3, caused by a race condition in how persistent searches are handled. An anonymous attacker could trigger a crash and denial of service under load. Affected products across multiple distributions (e.g., 389-ds-base packages o...
CVE-2019-3902
Mercurial before version 4.9 is affected by CVE-2019-3902. The issue arises from a flaw in path-checking logic that can be bypassed by using symlinks and subrepositories, allowing write access to files outside the repository. Affected product: Mercurial; root cause: bypass of path-checking when d...
CVE-2019-5757
CVE-2019-5757 concerns a type confusion in the SVG handling of Google Chrome/Chromium. The issue arises from an incorrect object type assumption in SVG, allowing a remote attacker to potentially corrupt objects via a crafted HTML page. Public advisories place the vulnerability in the Chrome/Chrom...
CVE-2019-9209
Wireshark vulnerability CVE-2019-9209 affects ASN.1 BER and related dissectors. From Wireshark versions 2.4.0–2.4.12 and 2.6.0–2.6.6, a buffer overflow could be triggered by excessive digits in time values, causing a crash. The issue was addressed in epan/dissectors/packet-ber.c by preventing the...
CVE-2019-9214
Wireshark CVE-2019-9214 affects the RPCAP dissector. In versions 2.4.0–2.4.12 and 2.6.0–2.6.6, it could crash due to a NULL conversation dereference. The issue is fixed by upgrading to a newer Wireshark release (e.g., OpenSUSE/SUSE advisories indicate 2.4.14 fixes this and related CVEs). Remediat...
CVE-2020-25625
QEMU before 5.2.0 is vulnerable to an infinite loop in the USB OHCI emulator (hw/usb/hcd-ohci.c) when a TD list contains a loop, potentially allowing a guest or host process to exhaust CPU or cause a denial of service. The issue is observed in QEMU 5.0.0; remediation is to upgrade to 5.2.0 or new...
CVE-2020-9428
The CVE-2020-9428 entry concerns Wireshark’s EAP dissector crashing due to parsing issues. Affected versions span Wireshark 3.2.0–3.2.1, 3.0.0–3.0.8, and 2.6.0–2.6.14. The root cause is unsafe parsing in epan/dissectors/packet-eap.c, addressed by switching to more careful sscanf parsing. Remediat...
CVE-2021-21222
CVE-2021-21222 is a heap buffer overflow in V8 (Chrome) prior to 90.0.4430.85, enabling a remote attacker with renderer access to bypass site isolation via a crafted HTML page. The issue is demonstrated across Chromium-derived stacks; affected components include V8 and related rendering/subsystem...
CVE-2021-30954
CVE-2021-30954 is a type-confusion vulnerability in WebKit/WebKitGTK that could allow arbitrary code execution when processing malicious web content. The issue is fixed in Apple platforms: tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, and iPadOS 15.2. The connected Astra Linux advisory a...
CVE-2021-46790
CVE-2021-46790 affects NTFS-3G’s ntfsck, causing a heap-based buffer overflow in versions up to 2021.8.22. The upstream note states ntfsck is deprecated, but it remains shipped in some distros. Connected advisories confirm the issue and document fixes/upgrades: Debian DSA-5160-1 and various Linux...
CVE-2022-20770
CVE-2022-20770 describes a denial-of-service in ClamAV caused by a CHM file parser vulnerability. Affected software: ClamAV scanning library versions 0.104.0–0.104.2 and LTS 0.103.5 and earlier. An unauthenticated, remote attacker could craft a CHM file to crash the ClamAV process, leading to DoS...
CVE-2022-41325
The CVE-2022-41325 entry concerns a vulnerability in VideoLAN VLC Media Player’s VNC module up to version 3.0.17.4, caused by an integer overflow that can be triggered by opening a crafted playlist or connecting to a rogue VNC server. Impact stated: crash or potential code execution under certain...
CVE-2023-52619
The CVE-2023-52619 issue affects the Linux kernel’s pstore/ram subsystem, where setting CPU count to an odd number causes zone_size to be odd, breaking address alignment and risking crashes when accessing zone memory. The documented fix uses ALIGN_DOWN() to ensure even zone sizes, preventing non‑...
CVE-2015-9382
FreeType vulnerability CVE-2015-9382 affects FreeType before 2.6.1. Root cause: buffer over-read in skip_comment (psobjs.c) due to mishandling of ps_parser_skip_PS_token in an FT_New_Memory_Face operation. In practice, this can lead to information disclosure or memory-related denial of service (a...
CVE-2016-0762
CVE-2016-0762 affects Apache Tomcat realms across multiple branches (Tomcat 9.0.x, 8.5.x, 8.0.x, 7.0.x, 6.0.x). The root cause: Realm implementations did not process the supplied password when the username did not exist, enabling a timing attack to determine valid usernames. The default LockOutRe...
CVE-2016-2518
CVE-2016-2518 affects NTP ntpd: MATCH_ASSOC() can trigger an out-of-bounds reference when handling addpeer with a large hmode. Affected versions are ntpd before 4.2.8p9 and 4.3.x before 4.3.92. Impact is a potential crash/denial of service via crafted packets. Mitigation: upgrade to fixed release...
CVE-2017-7482
CVE-2017-7482 affects the Linux kernel prior to 4.12. When Kerberos 5 tickets are decoded using RXRPC keys, the code incorrectly assumes the size of a field, causing the size-remaining calculation to wrap and the data pointer to extend past the buffer end. This can lead to memory corruption and p...
CVE-2017-7658
In CVE-2017-7658, Eclipse Jetty had a flaw in how it handles HTTP requests when multiple Content-Length headers are present or when a Content-Length header accompanies a chunked encoding header. This could allow a forged or pipelined request to bypass intermediary authorization if the shorter len...
CVE-2018-16846
CVE-2018-16846 affects Ceph versions before 13.2.4. Authenticated Ceph RGW users can cause a denial of service against OMAPs holding bucket indices. The issue is triggered by actions performed by RGW users with read/write permissions, as described in the CVE entry and corroborated by multiple adv...
CVE-2018-19478
Ghostscript (Artifex) vulnerable before 9.26. A carefully crafted PDF can trigger an extremely long-running computation while parsing, potentially causing a denial of service. CVE-2018-19478. The connected sources indicate the issue exists in Ghostscript 9.25 and earlier; remediation is to upgrad...
CVE-2018-19623
Wireshark CVE-2018-19623 affects the LBMPDM dissector in versions 2.6.0–2.6.4 and 2.4.0–2.4.10. The flaw allows a remote attacker to write arbitrary data to memory locations before the packet-scoped memory, causing a crash. Root cause: the LBMPDM dissector did not disallow certain negative values...
CVE-2019-25040
CVE-2019-25040 affects Unbound prior to 1.9.5 and describes an infinite loop in dname_pkt_copy triggered by compressed names. The linked sources (Astra Linux bulletin, Cloud Foundry USN, Debian/ALMA/Red Hat advisories) reiterate the same description and note the vendor disputes the vulnerability,...
CVE-2019-5764
CVE-2019-5764 is a use-after-free/incorrect pointer management in the WebRTC code path of Chromium/Google Chrome, prior to version 72.0.3626.81, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. Public references in Debian advisories and Fedora/Nessus entr...
CVE-2019-5774
CVE-2019-5774 affects Google Chrome on Linux; the issue arises from omission of the .desktop filetype in Safe Browsing checks, allowing an attacker who persuades a user to download a .desktop file to execute arbitrary code via that file. The vulnerability is tied to SafeBrowsing in Chrome before ...
CVE-2020-1735
CVE-2020-1735 is a vulnerability in the Ansible Engine where the fetch module can be intercepted, enabling an attacker to inject a new path and choose a different destination path on the controller. The issue affects all 2.7.x, 2.8.x and 2.9.x branches. Connected advisories confirm multiple vendo...
CVE-2020-19667
CVE-2020-19667: ImageMagick 7.0.10-7 contains a stack-based buffer overflow and unconditional jump in ReadXPMImage (coders/xpm.c). This CVE entry is based on the description for ImageMagick; exploitation details or mitigation are not provided in the connected documents.
CVE-2021-28714
Concrete details: CVE-2021-28714 and CVE-2021-28715 pertain to the Linux kernel netback driver in guests. Incoming packets for a guest are buffered until processing, with a long default client-side RX queue stall timeout (60 seconds) that can be bypassed; on fast UDP interfaces this can accumulat...
CVE-2022-27380
CVE-2022-27380 affects MariaDB Server (component: my_decimal::operator=) and was observed in v10.6.3 and below, where crafted SQL statements can trigger a Denial of Service. Connected advisories confirm the issue and reference MariaDB crash via my_decimal::operator= as the root cause. Remediation...
CVE-2023-27538
CVE-2023-27538 affects libcurl/curl (curl/libcurl) and related packages. The issue is an authentication bypass in libcurl prior to v8.0.0 where a previously established SSH connection could be reused despite an SSH option change, due to two SSH settings being omitted from the configuration match,...
CVE-2023-3090
CVE-2023-3090 is a Linux kernel vulnerability affecting the ipvlan driver. It causes a heap out-of-bounds write due to missing skb->cb initialization, and is exploitable when CONFIG_IPVLAN is enabled. The issue enables local privilege escalation as described in multiple sources (e.g., Astra Li...
CVE-2023-46234
CVE-2023-46234 affects the node-browserify-sign package used to provide browser-crypto signing functionality. The root cause is an upper bound check issue in the dsaVerify function, which allows an attacker to construct signatures that can be verified by any public key, enabling a signature forge...
CVE-2023-4909
CVE-2023-4909 describes an Inappropriate implementation in Interstitials in Google Chrome/Chromium prior to 117.0.5938.62 that allows a remote attacker to obfuscate the security UI via a crafted HTML page. The issue is documented across multiple sources (Chromium/Chrome advisories, Debian securit...
CVE-2011-1176
CVE-2011-1176 affects the Apache HTTP Server ITK MPM (mpm-itk) configuration merger in itk.c for versions 2.2.11-01 and 2.2.11-02. The flaw allows a remote attacker to potentially gain privileges by abusing configuration sections that specify NiceValue but omit AssignUserID, leveraging the root U...
CVE-2011-3045
CVE-2011-3045 describes an integer signedness error in libpng’s png_inflate (pngrutil.c) affecting libpng before 1.4.10beta01. The vulnerability, cited as used in Google Chrome before 17.0.963.83 and other products, can cause a denial of service (application crash) or potentially allow arbitrary ...
CVE-2015-7977
CVE-2015-7977 : ntpd/nptdsp (NTP) vulnerability where processing of the ntpdc reslist command could cause a NULL pointer dereference and crash ntpd. This is triggered by large restriction lists. Affects ntpd/ntpdc in NTP 4.2.x leading up to 4.2.8p6 and 4.3.x prior to 4.3.90. Remediation: upgrade ...
CVE-2016-5180
CVE-2016-5180 describes a heap-based buffer overflow in c-ares (versions 1.x before 1.12.0) in the ares_create_query function when a hostname with an escaped trailing dot is processed. This can lead to a denial of service or possibly remote code execution. The issue is triggered by incorrect stri...
CVE-2016-5420
CVE-2016-5420 affects curl/libcurl prior to 7.50.1, where the client certificate is not checked when reusing a TLS connection, enabling an attacker to hijack the authentication of an existing connection by leveraging a previously loaded client certificate. The related advisories confirm that this...
CVE-2017-3533
CVE-2017-3533 is an access restriction bypass in the Networking component (FTP client) of Oracle/OpenJDK Java SE. The newline-injection flaw in the FTP client could allow a remote attacker to manipulate FTP connections established by a Java application. Affected: Java SE/Embedded and JRockit vari...
CVE-2017-6815
WordPress before 4.7.3 (wp-includes/pluggable.php) is affected by CVE-2017-6815. The vulnerability arises from a control-character input that bypasses redirect URL validation, allowing an unauthenticated, remote attacker to craft a link that redirects a user to an arbitrary site. A fix is availab...