10009 matches found
CVE-2024-36005
CVE-2024-36005 is reported in the Astra Linux security bulletin as a Linux kernel vulnerability affecting nf_tables: the kernel could unregister an already unregistered nethook due to mishandling the table dormant flag on netdev release events. The issue is described with the same reproduction tr...
CVE-2025-37798
CVE-2025-37798 affects the Linux kernel networking code. The fix removes the qlen check in fq_codel_dequeue() and codel_qdisc_dequeue() after making sch->qlen_notify() callbacks idempotent. The description indicates the vulnerability related to backlog/queue length handling in qdisc code (code...
CVE-2009-0040
The CVE-2009-0040 issue affects the PNG reference library (libpng) as used in pngcrush and other apps. A crafted PNG can trigger a free of an uninitialized pointer in png_read_png, pCAL chunk handling, or 16-bit gamma table setup, enabling denial of service or possibly arbitrary code execution. A...
CVE-2010-2063
Summary of CVE-2010-2063 : Samba’s SMB1 packet chaining implementation in the chain_reply function (process.c) contains a buffer overflow vulnerability in Samba 3.0.x before 3.3.13. This allows remote attackers to cause memory corruption, daemon crashes, and potentially execute arbitrary code via...
CVE-2014-9529
CVE-2014-9529: A race condition in Linux kernel key garbage collection (key_gc_unused_keys in security/keys/gc.c) up to 3.18.2 can enable local users to cause DoS or memory corruption during key garbage collection via keyctl. Connected advisory confirms kernel upstream fix and lists commit a3a878...
CVE-2015-3405
CVE-2015-3405 concerns ntp-keygen generating MD5 keys with insufficient entropy on big-endian systems, enabling an attacker to brute-force 93 possible keys and potentially spoof NTP. The IBM Power HMC bulletin lists affected products and versions: Power HMC V7.3.0.0, V7.9.0.0, V8.1.0.0, and V8.2....
CVE-2015-7702
CVE-2015-7702 affects ntpd’s crypto_xmit implementation in NTP 4.2.x before 4.2.8p4 and 4.3.x before 4.3.77, allowing remote attackers to crash ntpd (DoS). The issue stems from an incomplete fix for CVE-2014-9750. Public advisories note the vulnerability and that updates have been released (e.g.,...
CVE-2017-10672
The CVE-2017-10672 issue affects the Perl XML-LibXML module; a use-after-free in XML-LibXML up to version 2.0129 allows remote attackers to execute arbitrary code by controlling arguments to replaceChild. The Nessus/OSINT entries confirm the vulnerability exists in multiple distro packages (e.g.,...
CVE-2018-20433
CVE-2018-20433 affects c3p0 (version 0.9.5.2) via an XML External Entity (XXE) vulnerability in extractXmlConfigFromInputStream() during initialization of C3P0ConfigXmlUtils. Several connected advisories confirm the issue and reference a fix: upgrading to 0.9.5.4 (as reported in Mageia MGASA-2020...
CVE-2018-20481
Poppler 0.72.0 contains a vulnerability in XRef::getEntry where unallocated XRef entries can cause a NULL pointer dereference and denial of service when XRefEntry::setFlag is invoked from Parser::makeStream in Parser.cc, exploitable via a crafted PDF. Connected advisories (Ubuntu USN-3865-1, SUSE...
CVE-2018-5129
The CVE-2018-5129 entry relates to a memory-safety/IPC validation issue where a lack of parameter validation on IPC messages can cause an out-of-bounds write, potentially enabling sandbox escape. Affected products include Mozilla Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox
CVE-2020-11739
CVE-2020-11739 affects the Xen hypervisor up to 4.13.x. The issue arises from missing memory barriers in the read-write unlock paths, enabling memory reordering on ARM that can break critical-section safety. A malicious guest could cause a race in hypercall paths (e.g., grant-table operations), p...
CVE-2020-15983
CVE-2020-15983 affects the Chromium browser’s webUI component and is tied to insufficient data validation before version 86.0.4240.75 (ChromeOS) that could allow a local attacker to bypass content security policy with a crafted HTML page. Public advisories and vendor notes show fixes in the 86.0....
CVE-2021-21109
Chromium-based Chrome up to version 87.0.4280.141 is affected by CVE-2021-21109. The issue is a use-after-free in the payments component that can be triggered when the renderer process is compromised via a crafted HTML page, potentially enabling a sandbox escape. Impact is use of arbitrary code a...
CVE-2024-26659
CVE-2024-26659 (Linux kernel) affects xHCI by mishandling isoc Babble and Buffer Overrun events. The driver could release a multi-TRB TD prematurely when an early TRB reports an error, risking loss of the final completion event and a misleading “Transfer event TRB DMA ptr not part of current TD” ...
CVE-2024-26739
CVE-2024-26739 affects the Linux kernel net/sched component (act_mirred) where overriding the skb return value after routing could lead to Use-After-Free if tcf_mirred_forward() had been called. The fix moves the retval override to the error path that actually requires it, preventing UaF when the...
CVE-2024-27052
CVE-2024-27052 affects the Linux kernel driver for rtl8xxxu (wifi) and is fixed by adding cancel_work_sync() in rtl8xxxu_stop() to prevent a potential use-after-free when the driver’s workqueue is still running after stop. The initial entry describes the issue and patch in general terms; connecte...
CVE-2024-35898
CVE-2024-35898 concerns a data-race in Linux kernel nf_tables flowtable lookup. The vulnerability arises when nft_unregister_flowtable_type() in nf_flow_inet_module_exit() runs concurrently with __nft_flowtable_type_get() in nf_tables_newflowtable(), and there is no protection when iterating nf_t...
CVE-2024-35969
Summary (CVE-2024-35969): A race in IPv6 handling in the Linux kernel between ipv6_get_ifaddr and ipv6_del_addr can cause use-after-free scenarios. When an entry is removed from inet6_addr_lst under RCU, ipv6_get_ifaddr may still return that entry and attempt to increment its reference, leading t...
CVE-2024-47697
CVE-2024-47697: Linux kernel dvb-frontends rtl2830 had an out-of-bounds write via rtl2830_pid_filter due to a boundary check allowing index 32. The patch updates the boundary to index >= 32 (instead of index > 32) and enforces that dev->filters, a 32-bit bitmap, uses set_bit/clear_bit on...
CVE-2025-37819
CVE-2025-37819 affects the Linux kernel and relates to a use-after-free in irqchip/gic-v2m: gicv2m_get_fwnode() registered as pci_msi_get_fwnode_cb(). With ACPI, this callback can be invoked during PCI host bridge probing but is marked __init and freed prematurely, risking a crash (as per the vul...
CVE-2025-37890
CVE-2025-37890 affects the Linux kernel net_sched hfsc when a class has a netem child qdisc. The root cause is a use-after-free in class insertion into the vttree/eltree, which can occur in reentrant scenarios; the patch validates n_active to prevent double insertion. The fix is a kernel patch in...
CVE-2010-4180
OpenSSL vulnerability CVE-2010-4180 affects OpenSSL versions before 0.9.8q and 1.0.x before 1.0.0c when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled. The flaw allows remote attackers to modify the ciphersuite in the session cache, enabling a downgrade to an unintended cipher by sniffing net...
CVE-2010-4494
CVE-2010-4494 is a double-free vulnerability in libxml2 (notably 2.7.8 and related versions) used by Chrome and other products. The issue affects libxml2’s handling of XPath/XML entities and could allow a remote attacker to crash or potentially execute code via crafted XML input. Public advisorie...
CVE-2014-1505
CVE-2014-1505 affects Mozilla Firefox (and related Mozilla components) where SVG filter operations in feDisplacementMap could leak displacement-correlation data and potentially bypass Same Origin Policy via a timing attack, enabling partial information disclosure from a different domain. Affected...
CVE-2015-7974
CVE-2015-7974 concerns the NTP reference implementation. The issue arises when authenticated packets are processed: symmetric-key peer associations are not properly verified, potentially enabling a remote attacker to impersonate a trusted peer (skeleton key). Affected are NTP 4.x prior to 4.2.8p6...
CVE-2016-2090
The CVE-2016-2090 issue is in the libbsd library, specifically the fgetwln() function. An off-by-one condition in the memory reallocation path can trigger a heap-based buffer overflow in versions before 0.8.2. Several advisories (e.g., Gentoo GLSA-201607-13, Debian DLA-2052-1) note potential remo...
CVE-2016-9897
CVE-2016-9897 affects Mozilla Firefox (versions < 50.1) and Firefox ESR (< 45.6) and Thunderbird (
CVE-2017-16525
The CVE-2017-16525 entry affects the Linux kernel: usb_serial_console_disconnect in drivers/usb/serial/console.c allows local users to trigger a denial of service (use-after-free and system crash) via a crafted USB device, with impact on confidentiality/integrity/availability as per the advisory....
CVE-2017-5440
CVE-2017-5440 is a use-after-free in XSLT processing caused by failure to propagate error conditions during matching while evaluating context, leading to use of freed objects and potentially a crash. Affected products include Mozilla Firefox (Firefox < 53) and Firefox ESR, and Mozilla Thunderb...
CVE-2018-10124
CVE-2018-10124 affects the Linux kernel before 4.13, where the kill_something_info() function in kernel/signal.c may allow a local attacker to cause a denial of service via an INT_MIN argument when using an unspecified architecture and compiler. The vulnerability is a local DoS condition (availab...
CVE-2018-1083
CVE-2018-1083 affects zsh: a stack/buffer overflow in the shell’s auto-complete path handling (gen_matches_files in compctl.c) can allow a local, unprivileged user to execute code in their own context, escalating privileges if the user is privileged. Public advisories and vendor notes confirm mul...
CVE-2018-5157
CVE-2018-5157 affects Mozilla Firefox prior to 60.0 (including ESR
CVE-2019-12746
CVE-2019-12746 affects Open Ticket Request System (OTRS) Community Edition: an agent login session ID could be disclosed by sharing a link to an embedded ticket article, enabling potential impersonation. Affected: OTRS 5.0.x up to 5.0.36 and 6.0.x up to 6.0.19. Impact: session impersonation risk ...
CVE-2019-15142
CVE-2019-15142 affects DjVuLibre 3.5.27 in the DJVU reader component. The vulnerability arises in DjVmDir.cpp (and related GString handling) where the code reads a DJVU file into a GTArray and then uses a UTF-8 string path, leading to a heap-based out-of-bounds read and a denial-of-service crash ...
CVE-2019-16217
WordPress, versions before 5.2.3, is affected by an XSS flaw in media uploads due to mishandling of wp_ajax_upload_attachment. The underlying issue is improper handling of upload attachments that allows cross-site scripting. The impact is XSS in the context of media uploads, with no other vectors...
CVE-2020-16300
Ghostscript 9.50 contains a buffer overflow in tiff12_print_page() (devices/gdevtfnx.c) that can be triggered by a crafted PDF file, allowing a remote attacker to cause denial of service. The issue is fixed in Ghostscript 9.51. Affected product: Artifex Ghostscript. Root cause: a buffer overflow ...
CVE-2020-25074
CVE-2020-25074 affects MoinMoin up to version 1.9.10, where the cache action in action/cache.py allows directory traversal via a crafted HTTP request, enabling remote code execution when an attacker can upload attachments. Multiple connected sources confirm the underlying issue and reference a fi...
CVE-2020-25676
CVE-2020-25676 concerns ImageMagick. Multiple unconstrained pixel offset calculations in CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo() (in MagickCore/pixel.c) were evaluated with floor(), producing undefined behavior via out-...
CVE-2021-43302
The CVE-2021-43302 issue is documented in connected advisories as a vulnerability in Ring (which includes an embedded copy of pjproject). The flaw allows an attacker-controlled filename argument to be copied into a fixed-size stack buffer in the PJSUA API (pjsua_recorder_create), potentially caus...
CVE-2022-0319
CVE-2022-0319 is an out-of-bounds read in Vim (vim/vim) prior to 8.2. The Debian LTS advisory for Vim lists CVE-2022-0319 among multiple Vim-related fixes and notes that upgrades to newer Vim packages address the issue. Affected product: Vim on Debian/Ubuntu family (and related Vim packages in ot...
CVE-2023-32762
Qt Network in Qt 5.15.14 and earlier, and in Qt 6.x before 6.2.9 (including 6.3.x–6.5.x before 6.5.1), incorrectly parses the Strict-Transport-Security header when its case does not exactly match. This can allow establishing unencrypted connections despite server requests to prohibit SSL/TLS down...
CVE-2023-4362
CVE-2023-4362 affects Google Chrome/Chromium prior to 116.0.5845.96. It is a heap buffer overflow in Mojom IDL that could allow a remote attacker who has already compromised the renderer process and gained control of a WebUI process to trigger heap corruption via a crafted HTML page, with impact ...
CVE-2024-0746
CVE-2024-0746 describes a crash triggered when a Linux user opens the print preview dialog in Mozilla components. Affected products include Firefox (versions before 122) and Firefox ESR (before 115.7) as well as Thunderbird (before 115.7). The issue is reported as a crash scenario in the print-pr...
CVE-2024-26698
Linux kernel hv_netvsc is affected by a race between netvsc_probe and netvsc_remove. The root cause is napi_disable being invoked on non-enabled subchannels, causing hung behavior during device removal due to an infinite msleep in napi_disable. The fix (commit ac5047671758) disables NAPI before c...
CVE-2024-35884
CVE-2024-35884 is a Linux kernel vulnerability in UDP GRO handling. When rx-udp-gro-forwarding is enabled, UDP packets may be GROed in transit and land in a tunnel, causing issues such as corrupted packets or kernel crashes (geneve path example). The root cause is that udp_gro_receive/udp4/udp6_g...
CVE-2024-35897
CVE-2024-35897 affects the Linux kernel nf_tables component. The issue arises when updating the discard table flag while a basechain deletion is pending, because unregistration of hooks is deferred to the commit phase. If both commands execute together, a basechain can be deleted while its hook r...
CVE-2004-0488
The provided documents confirm CVE-2004-0488: a stack-based buffer overflow in the ssl_util_uuencode_binary function of ssl_util.c used by Apache mod_ssl when configured to trust the issuing CA. This can allow remote code execution via a client certificate with a long subject DN. The issue affect...
CVE-2015-0294
The CVE-2015-0294 entry concerns GnuTLS before 3.3.13, where the library does not validate that the signature algorithms match when importing a certificate. The vulnerability is documented in multiple connected sources (e.g., MiracleLinux AXSA advisory referencing CVE-2015-0294 and vendor advisor...