PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 34

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 34 / 63

  1. CVE-2023-52356libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service
  2. CVE-2023-52355libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM
  3. CVE-2023-52340kernel: ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU
  4. CVE-2023-52323pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex
  5. CVE-2023-52160wpa_supplicant: potential authorization bypass
  6. CVE-2023-51781kernel: use-after-free in net/appletalk/ddp.c
  7. CVE-2023-51780kernel: use-after-free in net/atm/ioctl.c
  8. CVE-2023-51779kernel: bluetooth: bt_sock_ioctl race condition leads to use-after-free in bt_sock_recvmsg
  9. CVE-2023-51767openssh: authentication bypass via row hammer attack
  10. CVE-2023-51765sendmail: SMTP smuggling vulnerability
  11. CVE-2023-51764postfix: SMTP smuggling vulnerability
  12. CVE-2023-51714qt: incorrect integer overflow check
  13. CVE-2023-51596bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability
  14. CVE-2023-51594bluez: OBEX library out-of-bounds read information disclosure vulnerability
  15. CVE-2023-51592bluez: audio profile avrcp parse_media_folder out-of-bounds read information disclosure vulnerability
  16. CVE-2023-51589bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability
  17. CVE-2023-51580bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability
  18. CVE-2023-51385openssh: potential command injection via shell metacharacters
  19. CVE-2023-51384openssh: destination constraints only apply to first PKCS#11 key
  20. CVE-2023-51257jasper: Invalid memory write
  21. CVE-2023-51043kernel: use-after-free during a race condition between a nonblocking atomic commit and a driver unload in drivers/gpu/drm/drm_atomic.c
  22. CVE-2023-51042kernel: use-after-free in amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c
  23. CVE-2023-50977gnome-shell: Shell Captive Portal Hijack
  24. CVE-2023-50967jose: Denial of service due to uncontrolled CPU consumption
  25. CVE-2023-50868bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
  26. CVE-2023-50782python-cryptography: Bleichenbacher timing oracle attack against RSA decryption - incomplete fix for CVE-2020-25659
  27. CVE-2023-50781m2crypto: Bleichenbacher timing attacks in the RSA decryption API - incomplete fix for CVE-2020-25657
  28. CVE-2023-50762Mozilla: Truncated signed text was shown with a valid OpenPGP signature
  29. CVE-2023-50761Mozilla: S/MIME signature accepted despite mismatching message date
  30. CVE-2023-50495ncurses: segmentation fault via _nc_wrap_entry()
  31. CVE-2023-50447pillow: Arbitrary Code Execution via the environment parameter
  32. CVE-2023-50431kernel: information leak in sec_attest_info
  33. CVE-2023-50387bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator
  34. CVE-2023-50269squid: denial of service in HTTP request parsing
  35. CVE-2023-50268jq: stack-based buffer overflow in builds using decNumber
  36. CVE-2023-50246jq: heap buffer overflow in function decToString() in decNumber.c
  37. CVE-2023-50230bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability
  38. CVE-2023-50229bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability
  39. CVE-2023-50186gstreamer-plugins-bad-free: buffer overflow vulnerability
  40. CVE-2023-49994espeak-ng: floating point exception in PeaksToHarmspect at wavegen.c
  41. CVE-2023-49993espeak-ng: buffer overflow in ReadClause function at readclause.c
  42. CVE-2023-49992espeak-ng: buffer overflow in RemoveEnding at dictionary.c
  43. CVE-2023-49991espeak-ng: buffer underflow in CountVowelPosition function at synthdata.c
  44. CVE-2023-49990espeak-ng: buffer overflow in SetUpPhonemeTable function at synthdata.c
  45. CVE-2023-49582APR: Lax permissions in Apache Portable Runtime shared memory
  46. CVE-2023-49569go-git: Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
  47. CVE-2023-49568go-git: Maliciously crafted Git server replies can cause DoS on go-git clients
  48. CVE-2023-49441dnsmasq: vulnerable to Integer Overflow via forward_query
  49. CVE-2023-49288squid: Use-After-Free in the HTTP Collapsed Forwarding Feature
  50. CVE-2023-49286squid: Incorrect Check of Function Return Value In Helper Process management
CVE 2023 document archive — Page 34 | PulseLinux