CVE-2024-6387

CVE-2024-6387 is a remote code-execution vulnerability in OpenSSH’s server (sshd) caused by a race condition in a signal handler that may run after a client fails to authenticate within LoginGraceTime. The issue is exploitable by an unauthenticated, remote attacker on glibc-based Linux systems, p...

CVE-2024-28757

The CVE-2024-28757 entry concerns libexpat up to version 2.6.1, where XML External Entity (XXE) processing can be triggered when isolated external parsers are used (XML_ExternalEntityParserCreate). The impact is denial of service or resource exhaustion (availability impact: HIGH) with CVSS v3.1 b...

CVE-2021-44228

CVE-2021-44228 (Log4Shell) affects Apache Log4j2 2.0-beta9 through 2.15.0 (excluding some security releases) and is specific to log4j-core. The vulnerability arises from JNDI features used in configuration, log messages, and parameters, which can be exploited when an attacker can control log mess...

CVE-2023-52433

CVE-2023-52433: Linux kernel netfilter nft_set_rbtree vulnerability. New elements in a single transaction may expire before the transaction ends; skip sync GC during the transaction to avoid the commit path traversing an already released object. Async GC will collect expired elements after the tr...

CVE-2024-7254

CVE-2024-7254 describes a stack overflow DoS in parsers when handling untrusted Protocol Buffers data with deeply nested SGROUP/group structures. The root cause is unbounded recursion when parsing unknown fields (DiscardUnknownFieldsParser) or Java Protobuf Lite against nested groups or map field...

CVE-2023-38709

Apache HTTP Server (versions through 2.4.58 ) is vulnerable to HTTP response splitting due to faulty input validation in the core. This flaw allows malicious or exploitable backend/content generators to insert unsanitized headers, such as Content-Type or Content-Encoding , into the response. Prac...

CVE-2021-3156

CVE-2021-3156 is a heap-based buffer overflow in sudo that enables privilege escalation to root. The issue arises in the argument parsing path and is exploitable via commands using sudoedit -s with a trailing backslash, leading to memory corruption. Affected release information in the provided do...

CVE-2024-39884

A regression in the core of Apache HTTP Server 2.4.60 causes it to ignore certain legacy content-type based configurations for handlers, such as AddType . Under specific circumstances where files are requested indirectly, this oversight can lead to the source code disclosure of local content. For...

CVE-2024-24795

The Apache HTTP Server is vulnerable to HTTP response splitting across multiple modules. An attacker capable of injecting malicious response headers into backend applications can exploit this flaw to perform HTTP desynchronization attacks . This issue specifically affects Ubuntu 14.04 LTS , as no...

CVE-2024-34397

A vulnerability exists in GNOME GLib (specifically the GDBus signal subscription mechanism) before versions 2.78.5, 2.79.x before 2.80.1, and other affected distributions. A local attacker can spoof D-Bus signals that a GDBus-based client (such as those interacting with NetworkManager ) will wron...

CVE-2021-28165

The CVE-2021-28165 issue affects Eclipse Jetty versions 7.2.2–9.4.38, 10.0.0.alpha0–10.0.1, and 11.0.0.alpha0–11.0.1, where handling a large invalid TLS frame can cause CPU usage to reach 100%, leading to resource exhaustion. The underlying cause is described as abnormal processing after receivin...

CVE-2020-13817

CVE-2020-13817 affects ntp’s ntpd prior to 4.2.8p14 and 4.3.x prior to 4.3.100. An off‑path attacker can predict transmit timestamps in spoofed UDP packets to remote ntpd, causing a DoS via daemon exit or system time change when the victim relies on unauthenticated IPv4 time sources. Connected so...

CVE-2024-39689

Certifi-2024-39689 involves insufficient verification of data authenticity via the GlobalTrust root certificate. The issue stems from Certifi removing GLOBALTRUST roots in 2024.7.04, in line with Mozilla’s trust-store removals prompted by long-running compliance issues. Broadcom/BSNSA36222 confir...

CVE-2024-6119

OpenSSL CVE-2024-6119 causes a denial of service when applications perform certificate name checks (e.g., TLS server name validation). The issue stems from reading an invalid memory address during name comparison (e.g., otherName in X.509) and may terminate the process. Multiple connected advisor...

CVE-2024-34750

Apache Tomcat is vulnerable to Improper Handling of Exceptional Conditions and Uncontrolled Resource Consumption (CWE-755, CWE-400). When processing an HTTP/2 stream, the software fails to correctly handle cases of excessive HTTP headers , leading to a miscounting of active streams. This results ...

CVE-2023-36054

MIT Kerberos 5 (krb5) contains a vulnerability CVE-2023-36054 where lib/kadm5/kadm_rpc_xdr.c frees an uninitialized pointer due to improper validation between n_key_data and the key_data array. A remote authenticated user can trigger a kadmind crash. Affected versions include krb5 before 1.20.2 a...

CVE-2024-47554

The Apache Commons IO library (versions 2.0 before 2.14.0 ) contains an Uncontrolled Resource Consumption vulnerability. Specifically, the org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects multiple...

CVE-2024-28752

A Server-Side Request Forgery (SSRF) vulnerability exists in Apache CXF before versions 4.0.4 , 3.6.3 , and 3.5.8 when utilizing the Aegis DataBinding . The root cause lies in the XOP Include mechanism within multipart SOAP requests, which allows an attacker to abuse the href attribute to read lo...

CVE-2024-8096

The curl package contains a vulnerability where it fails to correctly handle OCSP stapling (Certificate Status Request TLS extension) responses. When used to verify server certificates, curl might incorrectly treat responses with errors other than 'revoked' (such as 'unauthorized') as valid, pote...

CVE-2024-29131

The Apache Commons Configuration library is vulnerable to an out-of-bounds write (CWE-787) in versions 2.0 through 2.10.0 . This vulnerability allows for potential memory corruption. A fix is available in version 2.10.1 . The issue is also identified as affecting IBM SPSS Modeler version 19.0.0.0...

CVE-2024-38286

The CVE-2024-38286 entry describes an Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat that, under certain configurations, allows an attacker to trigger an OutOfMemoryError by abusing the TLS handshake. Affected versions include Tomcat 11.0.0-M1 through 11.0.0-M...

CVE-2025-27820

A bug in the PSL validation logic within Apache HttpClient 5.4.x disables domain checks , which impacts cookie management and host name verification . This vulnerability was discovered by the Apache HttpClient team and has been addressed in the 5.4.3 release . No specific exploit details or in-th...

CVE-2025-0167

The curl package is vulnerable to a flaw where it could leak a password from a .netrc file to a followed-to host during HTTP redirects. This specific issue occurs only when the .netrc file contains a default entry that omits both the login and password, which is a rare circumstance. Impacted envi...

CVE-2024-0565

CVE-2024-0565 affects the Linux kernel CIFS (SMB) client: receive_encrypted_standard in fs/smb/client/smb2ops.c contains an out-of-bounds read caused by an integer underflow in memcpy length, leading to denial of service. Connected advisories consistently reference this CVE in kernel CIFS decrypt...

CVE-2024-49761

CVE-2024-49761 affects the Ruby ecosystem via the REXML XML toolkit. The vulnerability exists in the REXML gem before 3.3.9, where parsing an XML containing hex numeric character references (&#x...;) with many digits can cause a ReDoS. Ruby 3.2+ is not affected; Ruby 3.1 is the affected maintaine...

CVE-2023-2953

CVE-2023-2953: OpenLDAP contains a null pointer dereference in ber_memalloc_x(); affected OpenLDAP versions prior to the patched release are vulnerable. Connected advisories confirm a security update to OpenLDAP is available (e.g., OpenLDAP security update notes and Linux distro advisories), with...

CVE-2024-26633

The Linux kernel is vulnerable to a denial of service (DoS) condition due to incorrect handling of NEXTHDR_FRAGMENT in the ip6_tnl_parse_tlv_enc_lim() function. The root cause is that the frag_off operation is performed without ensuring sufficient bytes were pulled into the skb->head field, po...

CVE-2024-52533

A buffer overflow vulnerability exists in GNOME GLib (specifically in gio/gsocks4aproxy.c) prior to version 2.82.1 . The root cause is an off-by-one error where SOCKS4_CONN_MSG_LEN is insufficient to account for a trailing null character. This flaw can lead to a buffer overflow during processing....

CVE-2024-1351

CVE-2024-1351 (MongoDB TLS peer cert validation bypass) Affected product: MongoDB Server (versions affected as per CVE description): v7.0 before or including 7.0.5; v6.0 before or including 6.0.13; v5.0 before or including 5.0.24; v4.4 before or including 4.4.28. Root cause: When TLS is enabled, ...