CVE-2017-5408

CVE-2017-5408: Cross-origin reading of video captions in Mozilla products due to missing CORS header checks. Affected: Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, Thunderbird

CVE-2017-5445

CVE-2017-5445 describes a memory-read vulnerability in Mozilla products when parsing the application/http-index-format content, caused by uninitialized values used to create an array. The impact is information disclosure by reading uninitialized memory in affected components. Affected versions pe...

CVE-2017-5464

CVE-2017-5464 affects Mozilla products: Thunderbird

CVE-2017-5637

CVE-2017-5637 affects Apache ZooKeeper prior to fixes in 3.4.10 and 3.5.3. The issue: two four-letter commands, wchp and wchc, are CPU-intensive and can cause a denial of service by overwhelming CPU on the server, rendering it unable to serve legitimate clients. Affected products/versions include...

CVE-2017-7826

CVE-2017-7826 ties to memory-safety bugs in Firefox 56/ESR 52.4 and Thunderbird prior to 52.5. Affected versions: Firefox < 57, Firefox ESR < 52.5, Thunderbird

CVE-2018-1000069

CVE-2018-1000069 affects FreePlane

CVE-2018-1000140

CVE-2018-1000140 affects rsyslog librelp up to 1.2.14, with a stack-based buffer overflow in relpTcpChkPeerName when validating peer x509 certificates. This can enable remote code execution by a crafted certificate; impact is high/remote, exploitable over network without authentication. Public re...

CVE-2018-10102

WordPress 4.x prior to 4.9.5 is affected: the version string in get_the_generator is not escaped, enabling possible XSS in the generator tag. Root cause: lack of escaping in the generator tag output. Impact: potential client-side script execution via the generator tag. The vulnerability is mitiga...

CVE-2018-14660

CVE-2018-14660 : A flaw in GlusterFS server (versions up to 4.1.4 and 3.1.2) lets a remote, authenticated attacker repeatedly call setxattr on GF_META_LOCK_KEY to create multiple locks for a single inode, leading to memory exhaustion on the GlusterFS server node. Connected documents confirm Glust...

CVE-2018-15911

CVE-2018-15911 affects Artifex Ghostscript 9.23 prior to 2018-08-24. Attackers able to supply crafted PostScript can trigger uninitialized memory access in the aesdecode operator, potentially crashing the interpreter or executing code. Exploitation status is not detailed in the provided documents...

CVE-2018-5130

CVE-2018-5130 describes a memory corruption/denial-of-service risk in Mozilla Firefox/WebRTC where receiving packets with a mismatched RTP payload type can crash the browser. The vulnerability affects Firefox ESR versions earlier than 52.7 and standard Firefox versions earlier than 59. Multiple a...

CVE-2018-5748

CVE-2018-5748 affects libvirt and its QEMU monitoring path (qemu/qemu_monitor.c). A large QEMU reply can trigger memory exhaustion, enabling a denial-of-service. Connected documents also note an incomplete fix for CVE-2018-5748 that may be triggered via the QEMU guest agent (CVE-2018-1064). Vulne...

CVE-2018-6767

CVE-2018-6767 affects WavPack 5.1.0, with a stack-based buffer over-read in ParseRiffHeaderConfig (cli/riff.c) that can cause denial of service via crafted RF64 files; related issues in ParseDsdiffHeaderConfig and ParseCaffHeaderConfig can lead to heap/global over-reads or memory corruption in va...

CVE-2018-8794

CVE-2018-8794 affects rdesktop up to version 1.8.3. The vulnerability is an integer overflow causing an out-of-bounds write in process_bitmap_updates(), leading to memory corruption and potential remote code execution when connecting to a malicious server. Multiple connected advisories confirm re...

CVE-2019-12221

The CVE-2019-12221 entry corresponds to a NULL/SEGV issue in SDL_free_REAL inside SDL with SDL2_image 2.0.4 (SDL 2.0.9) when used together, as described in the initial document. Connected documents confirm this vulnerability is addressed by SDL2_image updates to 2.0.5 (and corresponding SDL relea...

CVE-2019-15145

DjVuLibre 3.5.27 is vulnerable to a denial-of-service via an out-of-bounds read when processing a crafted JB2 image. The root cause is a missing zero-byte check in libdjvu/GBitmap.h, affecting JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h. Exploitation requires a crafted JB2 image a...

CVE-2019-15939

CVE-2019-15939 affects OpenCV 4.1.0, with a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize (modules/objdetect/src/hog.cpp). The connected documents confirm the issue and its association with OpenCV 4.1.0, but do not provide details on affected vendor/version ranges beyond this relea...

CVE-2019-16738

MediaWiki up to 1.33.0 is affected by an information disclosure in Special:Redirect that exposes suppressed usernames via a User ID Lookup. Impact is information leakage of user identifiers; no exploitation details are provided in the sources beyond this disclosure. Public advisories and security...

CVE-2019-20161

CVE-2019-20161 affects GPAC up to version 0.8.0 and 0.9.0-development-20191109, due to a heap-based buffer overflow in ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c. The connected documents confirm the affected component and function and describe the impact as a heap-based overflow. Multipl...

CVE-2020-11047

CVE-2020-11047 : In FreeRDP, there is an out-of-bounds read in autodetect_recv_bandwidth_measure_results. A manipulated message from a server can enable reading up to 8 bytes of client memory. This affects FreeRDP versions after 1.1 and before 2.0.0. A patch is available in 2.0.0; upgrade to 2.0....

CVE-2020-14330

CVE-2020-14330 (Ansible) is an Improper Output Neutralization for Logs flaw in the uri module that can expose sensitive data in logs/output, including keys from playbooks, affecting confidentiality. The vulnerability affects Ansible Engine/uri usage with local access; no exploit details are provi...

CVE-2020-7040

CVE-2020-7040 affects the StoreBackup tool (storeBackup.pl) up to version 3.5, where it relies on the /tmp/storeBackup.lock path. This allows local attackers to perform a symlink attack or create a plain file named /tmp/storeBackup.lock to block usage, potentially leading to privilege escalation ...

CVE-2021-21108

CVE-2021-21108 is a use-after-free in the Chromium media component prior to version 87.0.4280.141. The flaw could allow a remote attacker who already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Impact is described as enabling arbitrary code executio...

CVE-2021-37967

CVE-2021-37967 describes an insecure implementation in the Background Fetch API in Google Chrome/Chromium, where a remote attacker who had already compromised the renderer process could leak cross-origin data via a crafted HTML page. The issue affects Chrome/Chromium prior to version 94.0.4606.54...

CVE-2022-0907

The CVE-2022-0907 entry concerns LibTIFF (libtiff) 4.3.0, where tiffcrop may dereference a NULL pointer due to an unchecked return value, enabling denial of service via a crafted TIFF file. The issue is rooted in a NULL pointer dereference in tiffcrop (and related paths handling TIFF data). For u...

CVE-2022-2124

CVE-2022-2124 describes a Buffer Over-read in the GitHub repository vim/vim prior to 8.2. The Astra Linux security bulletin confirms a Buffer Over-read in vim prior to 8.2. No additional technical details (affected platforms, exact root cause, exploit status) or remediation steps are provided in ...

CVE-2022-26651

The CVE-2022-26651 issue affects Asterisk through 19.x and Certified Asterisk through 16.8-cert13, in the func_odbc module, where inadequate escaping for backslash characters in SQL queries can cause user-provided data to create broken or injectable SQL. The documented impact includes potential i...

CVE-2022-3061

Astra Linux advisories confirm a Linux kernel fix related to the pixclock divide-by-zero issue in i740/i740fb families, aligning with CVE-2022-3061. The fix involves validating pixclock before use (e.g., zero check in charger-like var handling such as savagefb_check_var / i740fb equivalent) and n...

CVE-2022-47520

The CVE-2022-47520 entry concerns Linux kernel before 6.0.11. It stems from missing offset validation in drivers/net/wireless/microchip/wilc1000/hif.c of the WILC1000 wireless driver, allowing an out-of-bounds read while parsing an RSN information element from a Netlink packet. Impact is high for...

CVE-2023-1817

CVE-2023-1817 is a Chromium/Google Chrome issue affecting Google Chrome on Android prior to 112.0.5615.49, arising from insufficient policy enforcement in Intents. The underlying vulnerability allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Public advisories re...

CVE-2023-6206

CVE-2023-6206 is described across connected sources as a clickjacking-related issue tied to the fullscreen transition in Mozilla Firefox and Thunderbird. The vulnerability affects Firefox versions older than 120, Firefox ESR older than 115.5.0, and Thunderbird older than 115.5.0. The issue is dis...

CVE-2023-6860

CVE-2023-6860: The VideoBridge channel allowed a content process to access textures from remote decoders, creating a potential sandbox escape in Firefox ESR <115.6, Thunderbird <115.6, and Firefox

CVE-2024-35823

The Linux kernel is vulnerable to a unicode buffer corruption when deleting characters. This issue originates from overlapping buffers during the deletion process. The vulnerability is specifically related to the vt component and is the same issue previously addressed in the VGA text buffer (comm...

CVE-2024-35893

CVE-2024-35893 relates to a Linux kernel net/sched kernel-infoleak via act_skbmod. The issue was that tcf_skbmod_dump() copied four bytes from kernel stack to user space because struct tc_skbmod has a four‑byte hole. The fix clears the structure before filling fields to prevent uninitialized data...

CVE-2024-36889

CVE-2024-36889 concerns the Linux kernel’s MPTCP code. The issue arises when a client falls back to TCP during connect, and snd_nxt is not initialized yet; an incoming ACK could copy that uninitialized value into snd_una. If the MPTCP worker then re-injects data, it may trigger a cleanup using a ...

CVE-2024-46725

CVE-2024-46725 refers to a Linux kernel vulnerability where the drm/amdgpu path could trigger an out-of-bounds write warning. The connected Astra Linux bulletin confirms the issue as a kernel-level flaw and notes the fix was to validate the ring type value to prevent the OOB write. The vulnerabil...

CVE-2012-3158

CVE-2012-3158 – Oracle MySQL/MariaDB context : Affected MySQL Server components in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Protocol. Multiple connected advisories (e.g...

CVE-2015-2922

CVE-2015-2922 is a Linux kernel IPv6 Neighbor Discovery flaw in the ndisc_router_discovery path that lets a crafted Router Advertisement with a small hop_limit reconfigure the hop-limit on the receiving interface. It affects the IPv6 stack prior to kernel 3.19.6; the impact is loss of connectivit...

CVE-2016-5828

CVE-2016-5828 affects the Linux kernel on powerpc platforms (up to 4.6.3). The start_thread function mishandles transactional memory, allowing local users to cause a denial of service (invalid process state or TM Bad Thing exception, and system crash) by starting and suspending a transaction befo...

CVE-2016-6207

The CVE-2016-6207 issue affects the GD Graphics Library (libgd) up to version 2.2.3, due to an integer overflow in _gdContributionsAlloc within gd_interpolation.c. This allows remote attackers to trigger a denial of service via an out-of-bounds memory write or memory consumption. A patch/update t...

CVE-2017-17093

CVE-2017-17093 affects WordPress prior to 4.9.1, specifically wp-includes/general-template.php where the lang attribute of an HTML element is not properly restricted. This design flaw can enable cross-site scripting (XSS) via the site language setting. The vulnerability is addressed by WordPress ...

CVE-2017-3144

ISC DHCP vulnerability CVE-2017-3144 arises from failure to properly clean up closed OMAPI connections, which can exhaust the DHCP server’s socket descriptor pool and cause a denial of service. Affected releases include ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, and 4.3.0 to 4.3.6; older vers...

CVE-2017-3257

CVE-2017-3257 affects the MySQL Server component (Server: InnoDB). Affected: MySQL 5.6.34 and earlier and 5.7.16 and earlier. Description from multiple sources: an attacker with network access via multiple protocols and low privileges can exploit this to cause a hang or a repeated crash (partial ...

CVE-2017-7828

CVE-2017-7828 describes a use-after-free in Thunderbird/Firefox related to the PressShell object during layout flush and resize, causing potentially exploitable crashes. Affected products include Thunderbird < 52.5.0 and Firefox < 57 (and ESR

CVE-2018-18073

CVE-2018-18073 describes a sandbox-bypass vulnerability in Artifex Ghostscript. The issue arises in Ghostscript 9.25 and earlier where the saved execution stack can leak operator arrays or expose system operators in an error object, allowing a crafted PostScript to bypass -dSAFER/sandbox protecti...

CVE-2018-18284

Ghostscript 9.25 and earlier is affected by CVE-2018-18284, where the sandbox protection can be bypassed via vectors involving the 1Policy operator. Affected component: Ghostscript interpreter; root cause: sandbox bypass in policy handling. Impact: sandbox escape via crafted PostScript; in the Ar...

CVE-2018-20749

LibVNC/libvncserver (vncserver) contains a heap out-of-bounds write in libvncserver/rfbserver.c. CVE-2018-20749 and CVE-2018-20750 reference heap-out-of-bounds writes with incomplete fixes related to CVE-2018-15127; advisories note that the fix for the earlier CVE was incomplete and Debian/ALAS e...

CVE-2018-5817

CVE-2018-5817 concerns LibRaw’s unpacked_load_raw() in internal/dcraw_common.cpp. A type confusion error in LibRaw versions prior to 0.19.1 can be exploited to trigger an infinite loop, as described in multiple connected advisories. The vulnerability affects LibRaw’s raw image decoding path (unpa...

CVE-2018-7550

CVE-2018-7550 affects Quick Emulator (QEMU). The load_multiboot function in hw/i386/multiboot.c is vulnerable: if mh_load_end_addr > mh_bss_end_addr, it triggers an out-of-bounds read/write memory access. This enables a local guest OS user to execute arbitrary code on the QEMU host. Affected c...

CVE-2019-9897

PuTTY before version 0.71 is vulnerable to multiple denial-of-service attacks that can be triggered by writing to the terminal (CVE-2019-9897). The connected advisories indicate fixes in upstream PuTTY 0.71 and security updates across distributions (openSUSE/SUSE, Debian), resolving this and rela...