CVE-2022-27378

CVE-2022-27378 affects MariaDB Server, specifically the Create_tmp_table::finalize routine, with exploitation leading to a Denial of Service via specially crafted SQL statements. Available connected documents corroborate the issue across multiple MariaDB versions (notably v10.7 and below) and des...

CVE-2022-3889

CVE-2022-3889 : Type Confusion in V8 affecting Google Chrome/Chromium prior to 107.0.5304.106, leading to potential heap corruption via a crafted HTML page. Root cause: type confusion in V8. Impact: remote attacker could exploit to compromise memory; Chromium security rating: High. Affected produ...

CVE-2022-46871

CVE-2022-46871 is tied to an out-of-date libusrsctp library in Firefox prior to version 108. The vulnerability affects Firefox and is rated HIGH (CVSSv3.1: 8.8) with NETWORK attack vector, LOW complexity, no privileges required, user interaction needed, and potential HIGH impact on confidentialit...

CVE-2023-4352

CVE-2023-4352 is a Type Confusion in V8 affecting Google Chrome and other Chromium-based browsers prior to 116.0.5845.96, enabling potential heap corruption via a crafted HTML page. The CVE is rated High (8.8) with network attack vector, low complexity, requiring user interaction, and impacts to ...

CVE-2023-6174

Wireshark SSH dissector (CVE-2023-6174) crashes in versions 4.0.0–4.0.10, allowing denial of service via crafted captures or packet injection. Debian security advisory DSA-5559-1 notes a fix in version 4.0.11-1~deb12u1; other advisories reference 4.0.12+ releases. No exploitation details are prov...

CVE-2024-26804

CVE-2024-26804 affects the Linux kernel's IP tunnel infrastructure. The issue arises when packets are routed through a GRE tunnel and then encapsulated again (via ip_tunnel_xmit/ipip_tunnel_xmit), causing gre0 and ipip0 to inflate dev->needed_headroom iteratively. The neigh layer pulls skb wit...

CVE-2024-35853

A memory leak vulnerability exists in the Linux kernel 's mlxsw: spectrum_acl_tcam component during the rehash operation. The issue stems from a logic error where a failed rollback of a migration attempt can trigger another incorrect migration. Specifically, the code fails to verify that the back...

CVE-2024-36940

CVE-2024-36940 – Linux kernel pinctrl double-free issue Root cause: In the pinctrl core, freeing the pctldev is managed via devm_pinctrl_dev_release(), but the code in pinctrl_enable() frees that struct again, causing a double-free. The devm lifecycle is intended to release automatically; manual ...

CVE-2017-14064

CVE-2017-14064 affects Ruby before the fixed versions: Ruby 2.2.7 and earlier (2.2.x), 2.3.0–2.3.4, and 2.4.0–2.4.1. Root cause is a strdup-based bug in ext/json/ext/generator/generator.c that stops at the first NUL byte, returning a string of length zero while space_len indicates otherwise, expo...

CVE-2017-2620

CVE-2017-2620 affects QEMU with Cirrus CLGD 54xx VGA emulator prior to 2.8, where cirrus_bitblt_cputovideo can trigger out-of-bounds access while copying VGA data. This could allow a privileged guest user to crash the QEMU process or potentially execute arbitrary host code with QEMU privileges. P...

CVE-2017-9461

CVE-2017-9461 affects Samba smbd with a denial-of-service vulnerability caused by mis-handling dangling symlinks, leading to an infinite fd_open_atomic loop and high CPU/memory use. Affected versions are Samba before 4.4.10 and 4.5.x before 4.5.6. Remediation per sources is to upgrade to fixed re...

CVE-2018-1123

The CVE-2018-1123 issue affects procps-ng (ps) where an mmap-based buffer overflow allows a denial of service, with inbuilt guard paging limiting impact to a crash. Affected version: procps-ng before 3.3.15; mitigation is to upgrade to 3.3.15 or newer where the issue is addressed. The vulnerabili...

CVE-2018-12359

CVE-2018-12359 is a buffer overflow in rendering canvas content when dynamically adjusting the height/width, potentially causing a crash. Affected: Thunderbird and Firefox variants (e.g., Thunderbird < 52.9, Firefox ESR < 60.1, Firefox

CVE-2018-12366

CVE-2018-12366 describes an out-of-bounds read during QCMS color profile transformations caused by an invalid grid size. The vulnerability could leak private data in output. Affected products/versions include Thunderbird (and Firefox components) before specific fixed releases: Debian/CentOS advis...

CVE-2018-14678

CVE-2018-14678 affects the Linux kernel up to 4.17.11 (and Xen up to 4.11.x). The xen_failsafe_callback entry in arch/x86/entry/entry_64.S does not properly preserve RBX, enabling local attackers to trigger uninitialized memory usage, causing a denial of service; 64-bit x86 PV Linux guests may cr...

CVE-2019-3811

CVE-2019-3811 affects sssd: if a user has no home directory, sssd returns '/' instead of '', potentially allowing access beyond the user’s home dir. Affected are all versions prior to 2.1. Public advisories (e.g., Debian LTS DLA-3436-1) indicate a patch is available in newer sssd packages; remedi...

CVE-2020-18442

Vulnerability summary (CVE-2020-18442) : In zziplib 0.13.69, a mishandled return value in zzip_file_read can cause an infinite loop in unzzip_cat_file, allowing a remote attacker to trigger a denial of service. Affected component: zziplib (library for reading ZIP archives). Impact: denial of serv...

CVE-2020-8955

WeeChat is affected by CVE-2020-8955 via the irc_mode_channel_update path in plugins/irc/irc-mode.c. A crafted IRC message 324 (channel mode) can trigger a heap-based out-of-bounds write, causing a denial of service (application crash) and, per advisories, possibly arbitrary code execution. Upstr...

CVE-2021-20247

The CVE-2021-20247 issue affects isync/mbsync before v1.3.5 and v1.4.1. The root cause is that validations of mailbox names returned by IMAP LIST/LSUB do not occur, allowing a malicious or compromised IMAP server to craft mailbox names with .. components to access data outside the intended mailbo...

CVE-2021-21192

CVE-2021-21192 refers to a heap buffer overflow in the Chrome tab groups implementation, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product: Google Chrome (tab groups feature). Vulnerable component: tab groups code path handling HTML-driven...

CVE-2021-21209

CVE-2021-21209 concerns the Google Chrome storage API: an inappropriate implementation allowed a remote attacker to leak cross-origin data via a crafted HTML page in Chrome versions prior to 90.0.4430.72. The issue is documented across multiple advisories, noting it as an information-disclosure v...

CVE-2022-32085

CVE-2022-32085 affects MariaDB Server releases from v10.2 through v10.7, due to a segmentation fault in Item_func_in::cleanup/Item::cleanup_processor. Multiple connected advisories cite this CVE as affecting MariaDB in those ranges and flag the issue as a crash condition. Available connected docu...

CVE-2022-39353

CVE-2022-39353 — The xmldom library’s DOMParser can parse XML with multiple top-level elements, adding multiple root nodes to Document.childNodes without error. This violates the single-root assumption and is the underlying issue that prompted CVE-2022-39299. Affected: xmldom (JavaScript XML DOM ...

CVE-2024-26665

CVE-2024-26665 : Linux kernel vulnerability in tunnel PMTU error handling. When ICMPv6 error is built from a non-linear skb, there is an out-of-bounds/read issue due to using csum_partial. The fix replaces csum_partial with skb_checksum to correctly handle non-linear SKBs during IPv6 PMTU error c...

CVE-2024-26846

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting all controllers andfreeing 'left over IDs'. To prevent double free a synchronizationbetween nvme_delete_ctrl and ida_destroy has be...

CVE-2024-35947

The Linux kernel contains a vulnerability in the dyndbg component within the >control parser function (ddebug_tokenize ). The root cause is an old BUG_ON from 2009 that could lead to a service failure . Remediation involves replacing the BUG_ON with pr_err and returning -EINVAL . This issue ha...

CVE-2014-4914

The vulnerability CVE-2014-4914 affects Zend Framework’s Zend_Db_Select::order in versions prior to 1.12.7. The issue arises from improper handling of parentheses in the ORDER BY clause, enabling remote SQL injection via unspecified vectors. Affected product: Zend Framework (PHP framework); vulne...

CVE-2017-16921

CVE-2017-16921 affects OTRS 4.0.x up to 4.0.26, 5.0.x up to 5.0.24, and 6.0.x up to 6.0.1. An authenticated agent can manipulate form parameters (PGP-related) and execute arbitrary shell commands with the permissions of the OTRS/web server user. Multiple Nessus/OpenVAS entries corroborate remote ...

CVE-2017-3453

CVE-2017-3453 affects the MySQL Server component (Server: Optimizer). Affected are Oracle MySQL versions 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier. The vulnerability allows a low-privilege attacker with network access to cause a hang or frequent crash (complete DOS) of MySQL ...

CVE-2018-1000180

CVE-2018-1000180 affects Bouncy Castle BC 1.54–1.59 (and BC-FJA 1.0.0/1.0.1) with a flaw in the Low-level RSA key pair generator interface that may produce RSA key pairs with fewer Miller–Rabin primality tests than expected. IBM vulnerability bulletins associate this CVE with IBM products (e.g., ...

CVE-2018-12377

CVE-2018-12377 is a use-after-free vulnerability that can occur when refresh driver timers are refreshed during shutdown, potentially causing a crash when the timer is deleted while still in use. The issue affects Thunderbird versions prior to 60.2.1 (and related Firefox/ESR components). The docu...

CVE-2018-19475

CVE-2018-19475 affects Artifex Ghostscript prior to 9.26. The root cause is that psi/zdevice2.c fails to check available stack space when the device remains the same, allowing remote attackers to bypass intended access restrictions. The issue is reported as a remote-access/bypass vulnerability in...

CVE-2018-19624

CVE-2018-19624 affects Wireshark/dissector PVFS: the PVFS dissector in Wireshark versions 2.6.0–2.6.4 and 2.4.0–2.4.10 could crash due to a NULL pointer dereference. The issue was addressed by modifying epan/dissectors/packet-pvfs2.c to prevent the dereference. Connected sources confirm multiple ...

CVE-2018-20547

CVE-2018-20547 is a vulnerability in libcaca 0.99.beta19 involving an illegal READ memory access in get_rgba_default() within caca/dither.c for 24bpp data. The issue is documented in FreeBSD VuXML as part of the libcaca set of vulnerabilities (CVE-2018-20544..20549) and is reflected in multiple O...

CVE-2018-9516

CVE-2018-9516 affects the Linux kernel HID subsystem: in hid_debug_events_read() of drivers/hid/hid-debug.c there is a possible out-of-bounds write due to missing bounds checks. This can enable local privilege escalation with system-level rights; no user interaction is required. The vulnerability...

CVE-2019-10156

CVE-2019-10156 affects Ansible: templating flaw in versions before 2.6.18, 2.7.12 and 2.8.2 enables information disclosure through unintended variable substitution (contents of any variable may be disclosed). Several connected advisories confirm fixes/upgrades: e.g., Debian stable (buster) update...

CVE-2019-13112

Exiv2 (up to 0.27.1) is vulnerable to CVE-2019-13112 via PngChunk::parseChunkContent, where an uncontrolled memory allocation on parsing a crafted PNG can cause a denial of service (crash from std::bad_alloc). Several advisories confirm this issue alongside related Exiv2 PNG/CRW-related flaws, an...

CVE-2020-15972

CVE-2020-15972 is a use-after-free in the audio path of Chromium/Google Chrome prior to 86.0.4240.75. The issue could allow a remote attacker to exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution or other impacts as described in the Debian/Arch adviso...

CVE-2020-1740

CVE-2020-1740 is about Ansible Engine Vault editing: on the same host, ansible-vault edit can expose old/new secrets due to mkstemp/two-step write. Connected documents consistently confirm this vulnerability across multiple distributions (Astra Linux, Debian, Fedora/Red Hat, Alpine, Amazon Linux)...

CVE-2020-26418

Wireshark memory leak in the Kafka protocol dissector (affecting Wireshark 3.4.0 and 3.2.0–3.2.8) can cause denial of service via crafted captures or packet injection. The issue is evidenced across multiple public advisories in connected documents (e.g., Debian LTS advisory DLA-2547-1 listing CVE...

CVE-2021-21159

CVE-2021-21159 describes a heap buffer overflow in Chrome’s TabStrip prior to 89.0.4389.72. A remote attacker could potentially exploit this heap corruption via a crafted HTML page, leading to arbitrary code execution or crash. Connected advisories confirm Chrom(e/ium) components affected and not...

CVE-2021-39241

HAProxy contains a vulnerability CVE-2021-39241 where an HTTP method name may contain a space before a protected resource, potentially causing a request to be interpreted as accessing that resource. Affected series include HAProxy 2.0 before 2.0.24, 2.2 before 2.2.16, 2.3 before 2.3.13, and 2.4 b...

CVE-2021-39253

CVE-2021-39253 affects NTFS-3G prior to version 2021.8.22. A crafted NTFS image can trigger an out-of-bounds read in the function ntfs_runlists_merge_i, potentially leading to memory access errors. Several trusted sources summarize the issue across distributions and advisories, all tying the vuln...

CVE-2021-4008

The CVE-2021-4008 entry concerns xorg-x11-server with an out-of-bounds access in SProcRenderCompositeGlyphs. Affected versions are those before 21.1.2 and before 1.20.14. The vulnerability can impact data confidentiality, integrity, and availability; the highest impact is indicated for all three,...

CVE-2022-0368

CVE-2022-0368 affects the Vim/ Vim project, with an out-of-bounds read in vim/vim prior to 8.2. The entry lists a mix of impact indicators (C/H/I/A high/partial) and a CVSS 3.1 base score of 7.8 (LOCAL, HIGH) indicating local access and user interaction is required. The documents do not provide a...

CVE-2022-0696

CVE-2022-0696 is a NULL pointer dereference in Vim. Affected software is vim/vim prior to 8.2.4428. The connected docs confirm this CVE among Vim-related flaws and show patches in Debian/Ubuntu advisories (e.g., DLA-3204-1) and an Ubuntu/Debian security bulletin lineage. Remediation is to update ...

CVE-2022-2132

CVE-2022-2132 is a DoS vulnerability in DPDK caused by a permissive input validation that allows a remote attacker to trigger a denial of service by sending a crafted Vhost header. The issue affects the DPDK component handling Vhost descriptors, where processing of the Vhost header can exhaust mb...

CVE-2022-23833

The CVE affects Django: MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could cause an infinite loop while parsing uploaded files. There is no exploitation detail provided; the impact is a potential denial of service ...

CVE-2022-3235

CVE-2022-3235 affects vim/vim with a Use After Free in versions prior to 9.0.0490. The connected advisories indicate remediation through upgrading Vim to a newer release; multiple sources reference updating to a newer vim package (no explicit fixed version in the Initial Description). If exploiti...

CVE-2022-3705

CVE-2022-3705 affects vim. The vulnerability is in the function qf_update_buffer (file quickfix.c) of the autocmd Handler, causing a use-after-free. It may be triggered remotely. A fix is available in vim 9.0.0805; patch name: d0fab10ed2a86698937e3c3fed2f10bd9bb5e731. Evidence of impact and remed...