10003 matches found
CVE-2024-26675
CVE-2024-26675 (Linux kernel) affects the ppp_async path. The issue arises from MRU (Maximum Receive Unit) limits not being enforced for PPP async messages, which can trigger a warning in __alloc_pages via a memory/page allocation path when handling large skb allocations during PPP input. The des...
CVE-2024-26773
CVE-2024-26773: The Linux kernel ext4 block allocator vulnerability is resolved. The fix prevents allocating blocks from a group whose block bitmap is corrupted during concurrent operations by verifying the group bitmap integrity before using ac_b_ex in ext4_mb_try_best_found(), and by guarding t...
CVE-2024-35807
CVE-2024-35807 pertains to a Linux kernel ext4 online resize corruption when resizing a filesystem larger than 16 TiB with 4k blocks. The issue occurs during on-line resize across an 8 GiB boundary, affecting the backup block group descriptor for non-meta_bg layouts and can corrupt data. The root...
CVE-2024-49960
CVE-2024-49960 concerns ext4 on the Linux kernel. The issue is a timer use-after-free during failed mounts: the s_err_report timer can remain active while sbi is freed, because ext4_handle_error re-arms the timer before kfree(sbi). The root cause is not canceling the s_err_report timer after ext4...
CVE-2016-4565
CVE-2016-4565 affects the Linux kernel InfiniBand (IB) stack prior to 4.5.3, where certain IB interfaces improperly rely on write() semantics via a uAPI interface. This could allow a local unprivileged user to cause a denial of service (kernel memory write) and potentially other impact/escalation...
CVE-2017-1000363
CVE-2017-1000363: Linux kernel lp driver bounds-check flaw in lp.c allows a local attacker with write access to kernel command line arguments to overflow parport_nr and execute arbitrary code. Root cause: missing bounds check in arg handling. Public disclosures include Debian security advisories ...
CVE-2017-1000476
CVE-2017-1000476 is a denial-of-service vulnerability in ImageMagick where the CPU can be exhausted by crafted DDS files. It affects ImageMagick 7.0.7-12 Q16 due to a flaw in ReadDDSInfo in coders/dds.c. The initial description notes the impact as a denial of service with CVSS metrics indicating ...
CVE-2017-17862
CVE-2017-17862 affects the Linux kernel up to 4.14.8. The issue stems from kernel/bpf/verifier.c mis-pruning of unreachable code, which could be mishandled by JITs and enable a local denial-of-service by unprivileged users. Connected advisories and patches indicate this was addressed via kernel f...
CVE-2017-5373
Summary (CVE-2017-5373) Memory-safety bugs were reported in Firefox 50.1/ESR 45.6 and affect Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox
CVE-2017-5396
CVE-2017-5396 describes a use-after-free vulnerability in the Media Decoder when handling media files, where certain events fire after the media elements are freed. The initial document indicates affected products include Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox
CVE-2017-9935
In LibTIFF, CVE-2017-9935 affects the t2p_write_pdf function in tiff2pdf.c (LibTIFF 4.0.8 and earlier). The vulnerability is a heap-based buffer overflow that can cause out-of-bounds reads, invalid frees, memory corruption, or double frees, potentially enabling arbitrary code execution. Multiple ...
CVE-2018-13096
CVE-2018-13096 : A vulnerability in the Linux kernel (fs/f2fs/super.c) up to version 4.14 allows a denial of service via out-of-bounds memory access when mounting a crafted f2fs image. The issue occurs on abnormal bitmap sizes and can trigger a BUG. The connected Nessus advisories reiterate this ...
CVE-2018-5154
CVE-2018-5154 is a use-after-free in the enumeration of attributes during SVG animations with clip paths, causing a potentially exploitable crash. Affected: Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, Firefox ESR
CVE-2019-14437
CVE-2019-14437 affects VideoLAN VLC media player 3.0.7.1 and earlier: the xiph_SplitHeaders function in modules/demux/xiph.h does not check array bounds, enabling a heap-based buffer over-read via a crafted .ogg file. Public advisories note the issue among multiple VLC vulnerabilities and recomme...
CVE-2019-9210
CVE-2019-9210 affects the AdvanceCOMP recompression utilities. The flaw is in pngex.cc, inside advpng’s png_compress, where an invalid PNG size can trigger an integer overflow and lead to an attempted memcpy into a too-small buffer, with a heap-based buffer over-read also reported. A patched vers...
CVE-2020-11759
CVE-2020-11759 affects the OpenEXR open-source image library. The issue arises from integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, allowing an attacker to write to an out-of-bounds pointer in affected builds prior to 2.4.1. The OpenEXR pro...
CVE-2020-12862
CVE-2020-12862 affects the SANE backends project prior to version 1.0.30. The issue is an out-of-bounds read in the SANE backends that may allow a malicious device on the same local network to read memory content, including ASLR offsets, exposing partial confidentiality information. Exploitation ...
CVE-2020-13253
CVE-2020-13253 affects QEMU 4.2.0, where sd_wp_addr in hw/sd/sd.c uses an unvalidated address, causing an out-of-bounds read during sdhci_write() operations. This can allow a guest OS user to crash the QEMU process. The provided documents describe the vulnerability and impact but do not specify a...
CVE-2020-14398
CVE-2020-14398 affects LibVNCServer before 0.9.13. An improperly closed TCP connection can cause an infinite loop in libvncclient/sockets.c. Several advisories (EulerOS, SUSE, Red Hat-related Nessus plugins) reference updates to LibVNCServer 0.9.13+ as the fix. Affected products include various L...
CVE-2020-15987
CVE-2020-15987 is a use-after-free in the WebRTC component of Chromium/Google Chrome prior to 86.0.4240.75. This vulnerability could allow a remote attacker to potentially cause heap corruption via a crafted WebRTC stream, leading to arbitrary code execution as described in connected advisories. ...
CVE-2020-17490
CVE-2020-17490 affects SaltStack Salt (TLS module) up to version 3002, where the TLS execution module creates certificates with weak file permissions. The root cause is improper permissions on certificate files, potentially exposing private keys and enabling unintended access to sensitive materia...
CVE-2020-28040
CVE-2020-28040 affects WordPress before 5.5.2, where CSRF can change a theme’s background image. Public sources in connected documents confirm this issue and that WordPress 5.5.2 (security/maintenance release) addresses it. Affected product: WordPress; root cause: CSRF vulnerability enabling back...
CVE-2020-6517
CVE-2020-6517 : The connected documents confirm a heap buffer overflow in Chrome’s history handling, exploited via a crafted HTML page, affecting Chrome prior to 84.0.4147.89. The issue is listed among Chrome’s 2020 security fixes and was addressed in the Chrome 84 stable update (84.0.4147.89) fo...
CVE-2020-6540
CVE-2020-6540 is a buffer overflow in Skia used by Google Chrome, prior to 84.0.4147.105, allowing remote heap corruption via a crafted HTML page. The Debian security advisory DSA-4824-1 lists CVE-2020-6540 among fixed issues and recommends upgrading Chromium to at least 87.0.4280.88-0.4~deb10u1 ...
CVE-2020-6552
CVE-2020-6552 is a use-after-free in Blink affecting Google Chrome prior to 84.0.4147.125. The vulnerability could allow remote heap corruption via a crafted HTML page, enabling arbitrary code execution or a crash. Debian/GLSA notes advise upgrading Chromium/Chrome to the fixed version (84.0.4147...
CVE-2020-6562
CVE-2020-6562 affects Blink in Google Chrome; root cause is insufficient policy enforcement. A crafted HTML page could leak cross-origin data. Affected: Chrome before 85.0.4183.83. Fix: update to 85.0.4183.83 or newer (as per connected advisories).
CVE-2021-20276
The CVE-2021-20276 issue affects Privoxy and is due to invalid memory access when an invalid pattern is passed to pcre_compile() (obsolete PCRE code). This can lead to a Denial of Service. The issue is addressed in the Privoxy 3.0.32 update (openSUSE/Gentoo/GNU advisories reference CVE-2021-20276...
CVE-2021-39259
CVE-2021-39259 affects NTFS-3G: a crafted NTFS image can trigger an out-of-bounds access due to an unsanitized attribute length in ntfs_inode_lookup_by_name (NTFS-3G
CVE-2021-4008
The CVE-2021-4008 entry concerns xorg-x11-server with an out-of-bounds access in SProcRenderCompositeGlyphs. Affected versions are those before 21.1.2 and before 1.20.14. The vulnerability can impact data confidentiality, integrity, and availability; the highest impact is indicated for all three,...
CVE-2022-21682
CVE-2022-21682 (Flatpak-builder path traversal) Affects Flatpak and its builder prior to a fix: versions before 1.12.3 and 1.10.6. The vulnerability arises when flatpak-builder applies finish-args at finalization, allowing the build directory to inherit permissions declared in the manifest; with ...
CVE-2022-2869
CVE-2022-2869 affects libtiff’s tiffcrop tool, caused by a uint32_t underflow in extractContigSamples8bits that enables out-of-bounds read/write when processing a crafted TIFF file. An attacker could coerce a user to open a crafted file with tiffcrop, potentially crashing the application or enabl...
CVE-2022-3627
LibTIFF 4.4.0 is affected by CVE-2022-3627 due to an out-of-bounds write in _TIFFmemcpy (libtiff/tif_unix.c:346) when invoked from extractImageSection in tools/tiffcrop.c. This can lead to denial-of-service via a crafted TIFF file. The issue is addressed in the upstream fix committed as 236b7191,...
CVE-2023-5115
The CVE-2023-5115 issue is an absolute path traversal in the Ansible automation platform, enabling a maliciously crafted Ansible role (via a symlink) to overwrite files outside the intended extraction path. Affected component is Ansible (ansible-core/associated packages), with root cause describe...
CVE-2023-52683
CVE-2023-52683: Linux kernel ACPI LPIT integer-overflow in lpit_update_residency() (tsc_khz > UINT_MAX/1000) fixed by replacing a u32 multiplication with mul_u32_u32(). The MiracleLinux advisories (AXSA entries) reference this CVE among affected Linux kernel series and note remediation via ker...
CVE-2024-42159
The CVE-2024-42159 entry corresponds to a Linux kernel vulnerability in the SCSI mpi3mr driver where values stored in mr_sas_port->phy_mask could exceed the field size, risking improper handling and potential memory corruption. Public advisories (ALAS/Red Hat/Debian) list the fixed kernel upda...
CVE-2025-38416
Mode C: CVE-2025-38416 affects the Linux kernel NFC: nci: uart path. The vulnerability arises from setting tty->disc_data before the NCI device open/driver request succeeds, creating a small window where the device may start sending data and leaving state inconsistent on error paths. The fix e...
CVE-2013-5908
CVE-2013-5908 affects the MySQL Server component in Oracle MySQL up to 5.1.72, 5.5.34 and earlier, and 5.6.14 and earlier. The vulnerability is described as unspecified and related to Error Handling, enabling remote attackers to affect availability via unknown vectors. Public advisories and Nessu...
CVE-2015-7691
CVE-2015-7691 affects ntpd’s crypto_xmit handling in NTP 4.2.x (before 4.2.8p4) and 4.3.x (before 4.3.77). The flaw arises from incomplete validation of autokey operations in crafted packets, allowing a remote attacker to crash ntpd (denial of service). This is tied to an incomplete fix of CVE-20...
CVE-2015-7701
CVE-2015-7701 involves a memory leak in ntpd’s CRYPTO_ASSOC when autokey is enabled. Affected: ntpd in NTP 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77. Impact: potential denial of service due to memory exhaustion. Remediation: upgrade to fixed ntp releases (e.g., 4.2.8p4+ or 4.3.77+); or disable...
CVE-2017-14132
CVE-2017-14132 affects JasPer 1.900.8–1.900.31 and 2.0.0–2.0.16. A crafted image can trigger a heap-based buffer over-read in the function jas_image_ishomosamp (libjasper/base/jas_image.c), allowing remote attackers to cause an application crash (denial of service). The vulnerability is triggered...
CVE-2017-18267
The CVE-2017-18267 entry affects Poppler (FoFiType1C::cvtGlyph in FoFiType1C.cc) and describes a vulnerability in which a crafted PDF can trigger an infinite recursion, causing a denial of service (via pdftops). The issue is in Poppler up to version 0.64.0, with exploitation demonstrated by proce...
CVE-2017-5402
CVE-2017-5402 is a use-after-free in FontFace event handling that can crash Firefox/Thunderbird when a FontFace object is destroyed but events are fired. Affected products and versions include Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird
CVE-2017-7613
CVE-2017-7613 affects Elfutils 0.168. The vulnerability arises from memory allocation failure in elflint.c when opening a crafted ELF file, leading to denial of service via memory exhaustion. Affected product: Elfutils (version 0.168). Root cause: insufficient validation of number of sections/seg...
CVE-2018-16276
CVE-2018-16276 concerns the Linux kernel, specifically the yurex_read function in drivers/usb/misc/yurex.c. The issue is a bounds-check vulnerability that could allow a local attacker with access to the system to crash the kernel or potentially escalate privileges. Affected code path is in the US...
CVE-2018-20178
CVE-2018-20178 affects the rdesktop RDP client, with vulnerable versions up to 1.8.3. The flaw is an out-of-bounds read in process_demand_active(), leading to a denial of service (segfault). Several advisories note that multiple security issues exist and that updates to 1.8.4 or later patch the p...
CVE-2019-11474
GraphicsMagick 1.3.31 is affected by CVE-2019-11474 where crafting an XWD image file via coders/xwd.c can trigger a denial of service (floating‑point exception and crash). This CVE is distinct from CVE-2019-11008/11009. Public references in Nessus/Debian/Ubuntu advisories indicate a security upda...
CVE-2019-16792
CVE-2019-16792 affects Waitress up to version 1.3.1, where sending two Content-Length headers can cause a request to be treated as having no body and the body of the request becoming a new request in HTTP pipelining. The issue is caused by header folding of a double Content-Length and an inabilit...
CVE-2019-19318
The CVE-2019-19318 issue affects Linux kernel 5.3.11. Root cause: mounting a crafted btrfs image twice can trigger a use-after-free in rwsem_down_write_slowpath because rwsem_can_spin_on_owner’s rwsem_owner_flags returns an already freed pointer. Documented impact per sources indicates an availab...