PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 35

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 35 / 63

  1. CVE-2023-49285squid: Buffer over-read in the HTTP Message processing feature
  2. CVE-2023-49083python-cryptography: NULL-dereference when loading PKCS7 certificates
  3. CVE-2023-48952virtuoso-opensource: Crash in box_deserialize_reusing function
  4. CVE-2023-48951virtuoso-opensource: Missing constraint check in ddl_table_check_constraints_define_triggers() in libsrc/Wi/ddlrun.c
  5. CVE-2023-48950virtuoso-opensource: Improper interpretation of input arguments in ins_vec_agg() in libsrc/Wi/sqlintrp.c
  6. CVE-2023-48949virtuoso-opensource: Undefined behavior in box_add function
  7. CVE-2023-48948virtuoso-opensource: Undefined behavior in box_div function
  8. CVE-2023-48947virtuoso-opensource: Undefined behavior in setp_chash_distinct() in libsrc/Wi/chash.c
  9. CVE-2023-48946virtuoso-opensource: Undefined behavior in box_mpy function
  10. CVE-2023-48945virtuoso-opensource: Stack overflow due to missing type cast in ssl_needs_ins_cast() in libsrc/Wi/sqlvec.c
  11. CVE-2023-48795ssh: Prefix truncation attack on Binary Packet Protocol (BPP)
  12. CVE-2023-48706vim: use-after-free in ex_substitute in Vim
  13. CVE-2023-48237vim: buffer overflow in shift_line
  14. CVE-2023-48236vim: overflow in get_number
  15. CVE-2023-48235vim: overflow in ex address parsing
  16. CVE-2023-48234vim: overflow in nv_z_get_count
  17. CVE-2023-48233vim: overflow with count for :s command
  18. CVE-2023-48232vim: floating point exception in adjust_plines_for_skipcol()
  19. CVE-2023-48231vim: use after free in win_close()
  20. CVE-2023-48161giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function
  21. CVE-2023-47855intel-microcode: Improper input validation in some Intel® TDX module software
  22. CVE-2023-47466taglib: TagLib segmentation violation
  23. CVE-2023-47235frr: crash from malformed EOR-containing BGP UPDATE message
  24. CVE-2023-47234frr: crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  25. CVE-2023-47233kernel: Use after free in brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c
  26. CVE-2023-47108opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics
  27. CVE-2023-47100perl: Perl security bypass
  28. CVE-2023-47039perl: Perl for Windows binary hijacking vulnerability
  29. CVE-2023-47038perl: Write past buffer end via illegal user-defined Unicode property
  30. CVE-2023-46862kernel: NULL pointer dereference vulnerability in io_uring_show_fdinfo
  31. CVE-2023-46853memcached: off-by-one error when processing proxy requests in proxy mode
  32. CVE-2023-46852memcached: buffer overflow when processing multiget requests in proxy mode
  33. CVE-2023-46848squid: denial of Service in FTP
  34. CVE-2023-46847squid: Denial of Service in HTTP Digest Authentication
  35. CVE-2023-46846squid: Request/Response smuggling in HTTP/1.1 and ICAP
  36. CVE-2023-46813kernel: SEV-ES local priv escalation
  37. CVE-2023-46809nodejs: vulnerable to timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding (Marvin)
  38. CVE-2023-46753frr: crafted BGP UPDATE message leading to a crash
  39. CVE-2023-46752frr: mishandled malformed data leading to a crash
  40. CVE-2023-46751ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  41. CVE-2023-46728squid: NULL pointer dereference in the gopher protocol code
  42. CVE-2023-46724squid: Denial of Service in SSL Certificate validation
  43. CVE-2023-46589tomcat: HTTP request smuggling via malformed trailer headers
  44. CVE-2023-46343kernel: NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c
  45. CVE-2023-46316traceroute: improper command line parsing
  46. CVE-2023-46246vim: Integer Overflow in :history command
  47. CVE-2023-46234browserify-sign: upper bound check issue in dsaVerify leads to a signature forgery attack
  48. CVE-2023-46233crypto-js: PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
  49. CVE-2023-46219curl: excessively long file name may lead to unknown HSTS status
  50. CVE-2023-46218curl: information disclosure by exploiting a mixed case flaw
CVE 2023 document archive — Page 35 | PulseLinux