CVE-2021-21223

CVE-2021-21223 describes an integer overflow in Mojo inside Google Chrome prior to 90.0.4430.85. A remote attacker who has compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. Affected: Google Chrome (Mojo component) before 90.0.4430.85. Impact per ...

CVE-2021-28374

The CVE-2021-28374 issue affects the Debian courier-authlib package prior to 0.71.1-2 for Courier Authentication Library, which creates /run/courier/authdaemon with weak permissions, enabling an attacker to read user information (potentially including a cleartext password hash). The vulnerability...

CVE-2022-0213

CVE-2022-0213 is a heap-based buffer overflow in vim. The issue affects vim and has been addressed in multiple vendor advisories (e.g., Debian LTS DLA notices and Amazon Linux ALAS advisories). Connected documents confirm the vulnerability and list patches/upgraded packages (e.g., vim updates in ...

CVE-2023-5380

CVE-2023-5380 is a use-after-free in the xorg-x11-server (DestroyWindow path) that can crash the X server in Zaphod mode (multi-screen with multiple protocol screens). The issue is reported within the same family of xorg-x11-server memory-safety bugs, with the given CVSSv3.1 vector indicating Loc...

CVE-2015-9382

FreeType vulnerability CVE-2015-9382 affects FreeType before 2.6.1. Root cause: buffer over-read in skip_comment (psobjs.c) due to mishandling of ps_parser_skip_PS_token in an FT_New_Memory_Face operation. In practice, this can lead to information disclosure or memory-related denial of service (a...

CVE-2017-10110

CVE-2017-10110 affects the Java SE AWT component in Oracle Java SE and is reported in multiple advisories referencing OpenJDK/OpenJDK-derived packages. Affected versions noted across sources include Java SE 6u151, 7u141 and 8u131 (and related OpenJDK/OpenJDK7 packaging in Debian/CentOS/Arch Linux...

CVE-2019-12975

CVE-2019-12975 : ImageMagick 7.0.8-34 has a memory-leak vulnerability in WriteDPXImage (coders/dpx.c). The issue is a leak, with no described exploit vectors in the supplied documents. Connected sources also reference ImageMagick-related advisories and lists of CVEs; the MiracleLinux/Nessus entri...

CVE-2019-13377

CVE-2019-13377 affects the SAE and EAP-pwd implementations in hostapd and wpa_supplicant (2.x up to 2.8). The root cause is a side-channel weakness: observable timing differences and cache access patterns when Brainpool curves are used, enabling an attacker to recover parts of the password and po...

CVE-2019-3902

Mercurial before version 4.9 is affected by CVE-2019-3902. The issue arises from a flaw in path-checking logic that can be bypassed by using symlinks and subrepositories, allowing write access to files outside the repository. Affected product: Mercurial; root cause: bypass of path-checking when d...

CVE-2019-9209

Wireshark vulnerability CVE-2019-9209 affects ASN.1 BER and related dissectors. From Wireshark versions 2.4.0–2.4.12 and 2.6.0–2.6.6, a buffer overflow could be triggered by excessive digits in time values, causing a crash. The issue was addressed in epan/dissectors/packet-ber.c by preventing the...

CVE-2020-24616

The CVE-2020-24616 vulnerability affects FasterXML jackson-databind 2.x prior to 2.9.10.6, arising from the interaction between serialization gadgets and typing (related to br.com.anteros.dbcp.AnterosDBCPDataSource). Root cause is unsafe deserialization via Gadget chains in Jackson Databind. Impa...

CVE-2020-26575

Wireshark

CVE-2020-9428

The CVE-2020-9428 entry concerns Wireshark’s EAP dissector crashing due to parsing issues. Affected versions span Wireshark 3.2.0–3.2.1, 3.0.0–3.0.8, and 2.6.0–2.6.14. The root cause is unsafe parsing in epan/dissectors/packet-eap.c, addressed by switching to more careful sscanf parsing. Remediat...

CVE-2021-46790

CVE-2021-46790 affects NTFS-3G’s ntfsck, causing a heap-based buffer overflow in versions up to 2021.8.22. The upstream note states ntfsck is deprecated, but it remains shipped in some distros. Connected advisories confirm the issue and document fixes/upgrades: Debian DSA-5160-1 and various Linux...

CVE-2022-2000

CVE-2022-2000 is an Out-of-bounds Write affecting vim in Vim 8.2 before 8.2.2434. Debian LTS advisory DLA-3204-1 and Debian security notes document the fix: vim version 2:8.2.2434-3+deb11u3 for Debian 11 (bullseye) addresses CVE-2022-2000, with multiple other CVEs also patched in that update. Ast...

CVE-2023-52619

The CVE-2023-52619 issue affects the Linux kernel’s pstore/ram subsystem, where setting CPU count to an odd number causes zone_size to be odd, breaking address alignment and risking crashes when accessing zone memory. The documented fix uses ALIGN_DOWN() to ensure even zone sizes, preventing non‑...

CVE-2023-5472

CVE-2023-5472 describes a use-after-free in Chrome/Chromium Profiles prior to 118.0.5993.117, enabling heap corruption via a crafted HTML page for a remote attacker. Impact is high (CVE has base score 8.8). Affected software includes Google Chrome/Chromium; Debian advisories confirm fixed version...

CVE-2023-5724

The connected Astra Linux bulletin confirms CVE-2023-5724: Drivers are not always robust to extremely large draw calls, potentially causing crashes in Firefox before 119, Firefox ESR before 115.4, and Thunderbird before 115.4.1. Affected versions are Firefox <119, Firefox ESR <115.4, Thunde...

CVE-2016-0762

CVE-2016-0762 affects Apache Tomcat realms across multiple branches (Tomcat 9.0.x, 8.5.x, 8.0.x, 7.0.x, 6.0.x). The root cause: Realm implementations did not process the supplied password when the username did not exist, enabling a timing attack to determine valid usernames. The default LockOutRe...

CVE-2017-13672

CVE-2017-13672 affects QEMU when built with VGA display emulator support. A local privileged user can trigger an out-of-bounds read during VGA display update, crashing the QEMU process and causing DoS. Public advisories confirm vga-related fix in qemu-kvm components (e.g., ALAS-2018-1034, CESA-20...

CVE-2017-7658

In CVE-2017-7658, Eclipse Jetty had a flaw in how it handles HTTP requests when multiple Content-Length headers are present or when a Content-Length header accompanies a chunked encoding header. This could allow a forged or pipelined request to bypass intermediary authorization if the shorter len...

CVE-2018-10850

CVE-2018-10850 affects 389-ds-base prior to versions 1.4.0.10 and 1.3.8.3, caused by a race condition in how persistent searches are handled. An anonymous attacker could trigger a crash and denial of service under load. Affected products across multiple distributions (e.g., 389-ds-base packages o...

CVE-2018-19478

Ghostscript (Artifex) vulnerable before 9.26. A carefully crafted PDF can trigger an extremely long-running computation while parsing, potentially causing a denial of service. CVE-2018-19478. The connected sources indicate the issue exists in Ghostscript 9.25 and earlier; remediation is to upgrad...

CVE-2019-5757

CVE-2019-5757 concerns a type confusion in the SVG handling of Google Chrome/Chromium. The issue arises from an incorrect object type assumption in SVG, allowing a remote attacker to potentially corrupt objects via a crafted HTML page. Public advisories place the vulnerability in the Chrome/Chrom...

CVE-2019-9214

Wireshark CVE-2019-9214 affects the RPCAP dissector. In versions 2.4.0–2.4.12 and 2.6.0–2.6.6, it could crash due to a NULL conversation dereference. The issue is fixed by upgrading to a newer Wireshark release (e.g., OpenSUSE/SUSE advisories indicate 2.4.14 fixes this and related CVEs). Remediat...

CVE-2020-16116

CVE-2020-16116 affects KDE Ark prior to version 20.08.0, where kerfuffle/jobs.cpp does not sanitize extraction paths, allowing a crafted archive to write outside the extraction directory via a ../ path traversal. The impact is potential writing of files outside the target directory, with follow-o...

CVE-2020-1735

CVE-2020-1735 is a vulnerability in the Ansible Engine where the fetch module can be intercepted, enabling an attacker to inject a new path and choose a different destination path on the controller. The issue affects all 2.7.x, 2.8.x and 2.9.x branches. Connected advisories confirm multiple vendo...

CVE-2020-19667

CVE-2020-19667: ImageMagick 7.0.10-7 contains a stack-based buffer overflow and unconditional jump in ReadXPMImage (coders/xpm.c). This CVE entry is based on the description for ImageMagick; exploitation details or mitigation are not provided in the connected documents.

CVE-2021-21222

CVE-2021-21222 is a heap buffer overflow in V8 (Chrome) prior to 90.0.4430.85, enabling a remote attacker with renderer access to bypass site isolation via a crafted HTML page. The issue is demonstrated across Chromium-derived stacks; affected components include V8 and related rendering/subsystem...

CVE-2021-28714

Concrete details: CVE-2021-28714 and CVE-2021-28715 pertain to the Linux kernel netback driver in guests. Incoming packets for a guest are buffered until processing, with a long default client-side RX queue stall timeout (60 seconds) that can be bypassed; on fast UDP interfaces this can accumulat...

CVE-2021-30954

CVE-2021-30954 is a type-confusion vulnerability in WebKit/WebKitGTK that could allow arbitrary code execution when processing malicious web content. The issue is fixed in Apple platforms: tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, and iPadOS 15.2. The connected Astra Linux advisory a...

CVE-2022-20770

CVE-2022-20770 describes a denial-of-service in ClamAV caused by a CHM file parser vulnerability. Affected software: ClamAV scanning library versions 0.104.0–0.104.2 and LTS 0.103.5 and earlier. An unauthenticated, remote attacker could craft a CHM file to crash the ClamAV process, leading to DoS...

CVE-2022-41325

The CVE-2022-41325 entry concerns a vulnerability in VideoLAN VLC Media Player’s VNC module up to version 3.0.17.4, caused by an integer overflow that can be triggered by opening a crafted playlist or connecting to a rogue VNC server. Impact stated: crash or potential code execution under certain...

CVE-2023-3090

CVE-2023-3090 is a Linux kernel vulnerability affecting the ipvlan driver. It causes a heap out-of-bounds write due to missing skb->cb initialization, and is exploitable when CONFIG_IPVLAN is enabled. The issue enables local privilege escalation as described in multiple sources (e.g., Astra Li...

CVE-2011-3045

A signedness error exists in the png_inflate function within pngrutil.c for libpng versions before 1.4.10beta01 . This vulnerability affects Google Chrome (prior to version 17.0.963.83 ), syslinux (prior to version 6.04-11 ), and various libpng packages (such as libpng-1.2.48 , libpng-devel-1.2.4...

CVE-2016-2518

CVE-2016-2518 affects NTP ntpd: MATCH_ASSOC() can trigger an out-of-bounds reference when handling addpeer with a large hmode. Affected versions are ntpd before 4.2.8p9 and 4.3.x before 4.3.92. Impact is a potential crash/denial of service via crafted packets. Mitigation: upgrade to fixed release...

CVE-2017-7482

CVE-2017-7482 affects the Linux kernel prior to 4.12. When Kerberos 5 tickets are decoded using RXRPC keys, the code incorrectly assumes the size of a field, causing the size-remaining calculation to wrap and the data pointer to extend past the buffer end. This can lead to memory corruption and p...

CVE-2018-16846

CVE-2018-16846 affects Ceph versions before 13.2.4. Authenticated Ceph RGW users can cause a denial of service against OMAPs holding bucket indices. The issue is triggered by actions performed by RGW users with read/write permissions, as described in the CVE entry and corroborated by multiple adv...

CVE-2018-19623

Wireshark CVE-2018-19623 affects the LBMPDM dissector in versions 2.6.0–2.6.4 and 2.4.0–2.4.10. The flaw allows a remote attacker to write arbitrary data to memory locations before the packet-scoped memory, causing a crash. Root cause: the LBMPDM dissector did not disallow certain negative values...

CVE-2019-13758

CVE-2019-13758: Google Chrome/Chromium navigation policy enforcement flaw on Android allowed remote bypass of navigation restrictions via a crafted HTML page. Affected product: Chrome on Android prior to 79.0.3945.79. Impact: bypass of navigation restrictions (no exploitation details provided). R...

CVE-2019-25040

CVE-2019-25040 affects Unbound prior to 1.9.5 and describes an infinite loop in dname_pkt_copy triggered by compressed names. The linked sources (Astra Linux bulletin, Cloud Foundry USN, Debian/ALMA/Red Hat advisories) reiterate the same description and note the vendor disputes the vulnerability,...

CVE-2019-5764

CVE-2019-5764 is a use-after-free/incorrect pointer management in the WebRTC code path of Chromium/Google Chrome, prior to version 72.0.3626.81, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. Public references in Debian advisories and Fedora/Nessus entr...

CVE-2019-5774

CVE-2019-5774 affects Google Chrome on Linux; the issue arises from omission of the .desktop filetype in Safe Browsing checks, allowing an attacker who persuades a user to download a .desktop file to execute arbitrary code via that file. The vulnerability is tied to SafeBrowsing in Chrome before ...

CVE-2020-6516

CVE-2020-6516 is a Chrome/CORB policy-bypass vulnerability where cross-origin data could be leaked via a crafted HTML page. Affected product: Google Chrome prior to 84.0.4147.89 (Chromium-based browser). Root cause: CORS policy bypass in Chrome’s handling of cross-origin requests. Impact: potenti...

CVE-2021-23215

CVE-2021-23215 concerns the OpenEXR library’s DwaCompressor. Affected: OpenEXR versions before 3.0.1. Description: an integer overflow leads to a heap-buffer overflow, which could cause an application crash when processing crafted EXR files. Root cause: overflow in DwaCompressor logic. Impact: de...

CVE-2022-0417

CVE-2022-0417 is a heap-based buffer overflow in Vim (vim/vim) prior to 8.2.4743-1. Multiple connected advisories confirm a risk of crash or code execution when processing crafted input. Affected packages include Vim across various platforms (Ubuntu, Amazon Linux, Cloud Foundry advisories; Astra ...

CVE-2022-27223

The CVE-2022-27223 entry concerns Linux kernel code, specifically the udc-xilinx USB gadget driver (drivers/usb/gadget/udc/udc-xilinx.c). Affected are kernel builds before 5.16.12 where the endpoint index is not validated and can be manipulated by the host to trigger out-of-array access. The desc...

CVE-2022-27380

CVE-2022-27380 affects MariaDB Server (component: my_decimal::operator=) and was observed in v10.6.3 and below, where crafted SQL statements can trigger a Denial of Service. Connected advisories confirm the issue and reference MariaDB crash via my_decimal::operator= as the root cause. Remediation...

CVE-2022-3324

CVE-2022-3324 is a stack-based buffer overflow in vim/vim prior to 9.0.0598. Multiple vendors reference a fix in later vim releases (e.g., CBLMariner notes vim 9.0.0614-1; Debian tracks a fix in vim 2:8.2.2434-3+deb11u3; Cloud Linux/ALAS advisories describe the underlying issue as a window width/...

CVE-2023-27538

A vulnerability exists in libcurl prior to v8.0.0 where the library may reuse a previously established SSH connection even when an SSH option has been modified to prevent such reuse. The root cause is that two specific SSH settings were omitted from the configuration match checks, allowing mismat...