CVE-2021-39262

CVE-2021-39262 affects NTFS-3G prior to 2021.8.22, enabling a crafted NTFS image to trigger an out-of-bounds access in the ntfs_decompress function. Public advisories across multiple distributions (Debian, Alpine, AlmaLinux, etc.) indicate a fix in or after version 2021.8.22. Affected packages in...

CVE-2021-4009

Affected software: xorg-x11-server (versions before 21.1.2 and before 1.20.14). Fault: out-of-bounds access in SProcXFixesCreatePointerBarrier. Impact: potential data confidentiality, integrity, and availability compromise. Status: fixed in updated releases (e.g., 21.1.2 and 1.20.14 lineage) per ...

CVE-2022-3324

CVE-2022-3324 is a stack-based buffer overflow in vim/vim prior to 9.0.0598. Multiple vendors reference a fix in later vim releases (e.g., CBLMariner notes vim 9.0.0614-1; Debian tracks a fix in vim 2:8.2.2434-3+deb11u3; Cloud Linux/ALAS advisories describe the underlying issue as a window width/...

CVE-2022-46340

CVE-2022-46340 affects the X.Org X server. The issue is a stack overflow in the XTestSwapFakeInput path of the XTest extension, triggered when GenericEvents with lengths > 32 bytes are sent via XTestFakeInput. Reported consequences include local privilege elevation on privileged X servers and ...

CVE-2023-4236

CVE-2023-4236 affects BIND 9 to include versions 9.18.0–9.18.18 and 9.18.11-S1–9.18.18-S1. The issue is a flaw in the DNS-over-TLS networking code that can cause an assertion failure, leading to an unexpected termination of named under heavy DNS-over-TLS query load. The practical consequence is a...

CVE-2024-26704

CVE-2024-26704 affects the Linux kernel ext4 filesystem. The issue was a double-free of blocks in ext4_move_extents: moved_len was only updated when all moves succeeded, causing potential overlap with preallocated extents to be freed twice and triggering a zero-division in mb_update_avg_fragment_...

CVE-2024-35847

CVE-2024-35847 affects the Linux kernel irqchip/gic-v3-its path. The vulnerability stems from the error handling in its_vpe_irq_domain_alloc(), where a double free occurs if its_vpe_init() fails after at least one interrupt was allocated. The code frees the area bitmap and vprop_page in its_vpe_i...

CVE-2014-2270

CVE-2014-2270 affects the file/libmagic implementation (softmagic.c) prior to version 5.17. A crafted PE executable can trigger an out-of-bounds memory access in the softmagic data, enabling a context-dependent attacker to cause a denial-of-service (crash). Public advisories describe the impact a...

CVE-2015-5252

The CVE-2015-5252 issue affects Samba’s smbd (vfs.c) where symlinks can bypass share path restrictions when share names contain certain substrings. A remote, authenticated attacker could access resources outside the intended share by pointing a symlink outside the share. Affected series include S...

CVE-2017-13194

CVE-2017-13194 affects libvpx used by the Android media framework. The root cause is incorrect validation of odd frame widths in libvpx, enabling denial of service and, in some advisories, potential arbitrary code execution. Affected environments include Android 7.x–8.x and various Linux distribu...

CVE-2017-2518

CVE-2017-2518 is an SQLite-related vulnerability affecting Apple devices (iOS < 10.3.2; macOS < 10.12.5; tvOS < 10.2.1; watchOS

CVE-2017-5378

CVE-2017-5378 involves hashed codes of JavaScript objects enabling pointer leaks and potential data leakage. The vulnerability affects Mozilla products as noted in connected sources: Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox

CVE-2017-6888

CVE-2017-6888 concerns the FLAC library: in FLAC version 1.3.2, the function read_metadata_vorbiscomment_() may leak memory when processing a specially crafted FLAC file. This memory leak could contribute to resource exhaustion and a denial of service. The vulnerability is documented across multi...

CVE-2018-1000005

CVE-2018-1000005 affects libcurl 7.49.0 through 7.57.0, due to an out-of-bounds read when handling HTTP/2 trailers. Reading a trailer could corrupt future trailers, leading to a crash or potential information disclosure; the issue arises from mis-updated math after changing the header creation to...

CVE-2018-5103

CVE-2018-5103 is a use-after-free vulnerability that can occur during mouse event handling due to multiprocess-related issues, leading to potentially exploitable crashes. Affected products include Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox

CVE-2018-5156

The CVE-2018-5156 entry describes a vulnerability in media capture: when the media source type is changed during capture, stream data can be cast to the wrong type, causing a crash. Affected products include Thunderbird

CVE-2019-19535

CVE-2019-19535 affects the Linux kernel up to 5.2.8 via the PCAN-USB FD driver (drivers/net/can/usb/peak_usb/pcan_usb_fd.c). A malicious USB device can trigger an info-leak in this driver (CID-30a8beeb3042), causing partial information disclosure. Affected product: Linux kernel before 5.2.9; vuln...

CVE-2020-13920

CVE-2020-13920 affects Apache ActiveMQ through a JMX RMI registry authentication flaw. An unauthenticated client can bind a proxy to the jmxrmi entry, enabling MITM-style interception of credentials when users connect. Affected guidance: upgrade to a fixed ActiveMQ release (initial advisory cites...

CVE-2020-15976

CVE-2020-15976 is a use-after-free in the WebXR component of Chromium/Google Chrome (Android) prior to 86.0.4240.75, potentially enabling heap corruption and arbitrary code execution via a crafted HTML page. Remediation from connected sources includes upgrading to Chromium 86.0.4240.75 or newer (...

CVE-2020-19131

CVE-2020-19131 describes a buffer overflow in LibTIFF v4.x, specifically in the invertImage() path of tiffcrop, leading to DoS. The connected docs confirm this vulnerability and tie it to multiple Linux advisories. Affected product is LibTIFF/libtiff; vulnerability stems from buffer overflow/unsa...

CVE-2020-6557

CVE-2020-6557 affects Chromium prior to 86.0.4240.75. The vulnerability arises from an inappropriate implementation in the networking component, enabling domain spoofing via a crafted HTML page. Public documents in connected sources confirm the issue and recommend upgrading Chromium to 86.0.4240....

CVE-2021-21113

CVE-2021-21113 refers to a heap buffer overflow in the Skia component of the Chromium-based Chromium/Google Chrome stack, reported as affecting versions before 87.0.4280.141. The vulnerability can allow a remote attacker to potentially cause heap corruption through a crafted HTML page. The connec...

CVE-2021-21181

CVE-2021-21181 is a side-channel information leakage vulnerability in Chrome Autofill. The connected Debian security advisories confirm this CVE among a chromium set and state that fixes are available in Chrome 89.x (mitigated in Debian packages as 89.0.4389.114 and later). The Astra Linux bullet...

CVE-2021-21381

Flatpak before 1.10.2 is vulnerable to a sandbox-escape where an attacker can abuse the Exec field in a .desktop file by using tokens like @@ or @@u, causing the user’s files to be exposed to the Flatpak app. The vulnerability, affecting Flatpak versions 0.9.4 through 1.10.1, is fixed in 1.10.2. ...

CVE-2021-36740

Varnish Cache, with HTTP/2 enabled, is vulnerable to request smuggling and VCL authorization bypass via a large Content-Length header in POST requests. Affected: Varnish Enterprise 6.0.x before 6.0.8r3; Varnish Cache 5.x and 6.x before 6.5.2; 6.6.x before 6.6.1; and 6.0 LTS before 6.0.8. Mitigati...

CVE-2021-39263

CVE-2021-39263 is a vulnerability in NTFS-3G where a crafted NTFS image can trigger a heap-based buffer overflow due to an unsanitized attribute in ntfs_get_attribute_value. The issue is in NTFS-3G versions older than 2021.8.22. Reported impact includes potential heap buffer overflow when process...

CVE-2022-26353

CVE-2022-26353 affects QEMU’s virtio-net device. Root cause: after CVE-2021-3748 fix, cached virtqueue elements aren’t unmapped on error, causing memory leakage. Affected versions include QEMU 6.2.0 and older builds (e.g., packages listed as

CVE-2022-27445

CVE-2022-27445 affects MariaDB Server v10.9 and below, caused by a segmentation fault in the sql_window.cc component. The issue is described in connected advisories as a denial-of-service risk due to kernel-like crash conditions triggered during query processing. Exploitation details are not prov...

CVE-2024-3044

CVE-2024-3044 concerns LibreOffice: Unchecked script execution in Graphic on-click binding allows a document to trigger built-in scripts when clicking a graphic, previously treated as trusted but now untrusted. The vulnerability affects multiple LibreOffice builds across distributions, with remed...

CVE-2024-49884

CVE-2024-49884 : Linux kernel ext4 slab-use-after-free in ext4_split_extent_at() during unwritten/extents handling. The issue stems from use-after-free of path data (path) when updating extents after an error (-ENOMEM/-EIO). The connected Astra Linux and kernel notes describe the root cause chain...

CVE-2016-0706

CVE-2016-0706 affects Apache Tomcat. Root cause: StatusManagerServlet not on RestrictedServlets.properties, enabling remote authenticated users to bypass SecurityManager and read arbitrary HTTP requests, potentially exposing session IDs. Affected versions include Tomcat 6.x before 6.0.45, 7.x bef...

CVE-2016-2518

CVE-2016-2518 affects NTP ntpd: MATCH_ASSOC() can trigger an out-of-bounds reference when handling addpeer with a large hmode. Affected versions are ntpd before 4.2.8p9 and 4.3.x before 4.3.92. Impact is a potential crash/denial of service via crafted packets. Mitigation: upgrade to fixed release...

CVE-2017-17806

CVE-2017-17806 affects the Linux kernel before 4.14.8. The HMAC implementation (crypto/hmac.c) does not validate that the underlying hash algorithm is unkeyed, allowing a local attacker who can use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and SHA-3 (CONFIG_CRYPTO_SHA3) to tri...

CVE-2017-2618

CVE-2017-2618 is a Linux kernel local vulnerability caused by how SELinux attributes are cleared on /proc/pid/attr. An empty write to that file can crash the system by triggering access to unmapped kernel memory. The connected Nessus entries (Unity Linux, MiracleLinux AXSA advisory, and related p...

CVE-2017-5444

CVE-2017-5444 is a buffer overflow in parsing application/http-index-format data that enables an out-of-bounds read. Affected: Mozilla Thunderbird < 52.1, Firefox ESR < 45.9/52.1, and Firefox

CVE-2018-11356

Wireshark CVE-2018-11356 affects the DNS dissector. In Wireshark 2.6.0, 2.4.0–2.4.6, and 2.2.0–2.2.14, a NULL pointer dereference for an empty name in an SRV record could crash. The issue is specifically a crash/denial-of-service vulnerability caused by dereferencing a NULL when parsing SRV entri...

CVE-2018-11357

CVE-2018-11357 affects Wireshark up to version 2.6.0 (2.4.0–2.4.6 and 2.2.0–2.2.14 among others) where the LTP dissector and several other dissectors could allocate excessive memory. Root cause: tvbuff.c rejected negative lengths, addressing the overflow/memory consumption. Remediation: upgrade t...

CVE-2018-11358

CVE-2018-11358 affects Wireshark dissector Q.931 across multiple branches (2.6.0, 2.4.0–2.4.6, 2.2.0–2.2.14) with a use-after-free in packet-q931.c that could crash on malformed input. The vulnerability was addressed by preventing the cleanup/use-after-free sequence. In practice, security advisor...

CVE-2018-14343

CVE-2018-14343 affects Wireshark’s ASN.1 BER dissector across multiple versions (2.6.0–2.6.1, 2.4.0–2.4.7, 2.2.0–2.2.15). The issue is a crash caused by length values exceeding the maximum signed integer in the BER dissector. The published fix adjusts bounds in epan/dissectors/packet-ber.c to pre...

CVE-2018-14356

CVE-2018-14356 affects mutt prior to 1.10.1 and NeoMutt prior to 2018-07-16; root cause is pop.c mishandling a zero-length UID. CVSS data in the entry indicate HIGH/CRITICAL impact (network attack, no authentication, no user interaction). Connected sources confirm the issue but do not provide a v...

CVE-2018-20019

CVE-2018-20019 refers to LibVNC vulnerabilities where multiple heap out-of-bounds writes in the VNC client code can lead to remote code execution. Connected documents confirm an incomplete fix in the affected LibVNC components (e.g., “Incomplete fix for CVE-2018-20019”) and list LibVNCServer/LibV...

CVE-2018-20097

CVE-2018-20097 affects Exiv2 0.27-RC3, where a crafted input can trigger a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups in tiffimage_int.cpp, leading to remote denial of service. The connected documents confirm the vulnerable component and the DoS impact via crafted image data, wi...

CVE-2018-3070

CVE-2018-3070 affects Oracle MySQL Server (MySQL client mysqldump component). Affected versions are 5.5.60 and earlier, 5.6.40 and earlier, and 5.7.22 and earlier. The vulnerability is described as easily exploitable, requiring network access via multiple protocols, and can allow a low-privileged...

CVE-2018-5091

CVE-2018-5091 describes a use-after-free in Firefox/Firefox ESR during WebRTC connections when handling DTMF timers, leading to a potentially exploitable crash. Public sources indicate affected products are Firefox ESR versions prior to 52.6 and Firefox prior to 58. Upstream/agency advisories con...

CVE-2018-7492

The CVE-2018-7492 entry affects the Linux kernel prior to 4.14.7, where a NULL pointer dereference in net/rds/rdma.c __rds_rdma_map() can be triggered by local attackers via RDS_GET_MR / RDS_GET_MR_FOR_DEST. This leads to a system panic and denial-of-service. Affected versions are exposed to loca...

CVE-2019-11009

CVE-2019-11009: GraphicsMagick has a heap-based buffer over-read in ReadXWDImage (coders/xwd.c) that can cause denial of service or information disclosure when processing crafted XWD images. Affected product: GraphicsMagick 1.4 snapshot-20190322 Q8 (and related 1.3.31 references in older advisori...

CVE-2019-18609

CVE-2019-18609 affects rabbitmq-c 0.9.0 (librabbitmq) with an integer overflow in amqp_handle_input (amqp_connection.c) that causes heap memory corruption when processing CONNECTION_STATE_HEADER. A rogue server could send a malicious header to reduce target_size, leading to a heap-based copy over...

CVE-2019-19536

CVE-2019-19536 is an info-leak vulnerability in the Linux kernel (<5.2.9) caused by a faulty handling of a malicious USB device in drivers/net/can/usb/peak_usb/pcan_usb_pro.c (CID-ead16e53c2f0). Some public advisories (Unity Linux UTSA-2026-*) reference this CVE and note the issue affects kern...

CVE-2019-6486

CVE-2019-6486 affects Go runtimes prior to 1.10.8 and 1.11.x prior to 1.11.5, due to mishandling of P-521 and P-384 elliptic curves. This can cause CPU-based denial of service and may allow ECDH private key recovery. Public details across connected docs confirm the vulnerability and its Go-versio...

CVE-2020-15960

CVE-2020-15960 refers to an information-disclosure vulnerability in Chromium/Google Chrome prior to 85.0.4183.121. The 15960 issue is an out-of-bounds read in the storage component, exploitable via a crafted HTML page. The Debian/Arch/Gentoo entries corroborate the fix was to upgrade to 85.0.4183...