PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 36

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 36 / 63

  1. CVE-2023-46159ceph: RGW crash upon misconfigured CORS rule
  2. CVE-2023-46136python-werkzeug: high resource consumption leading to denial of service
  3. CVE-2023-46103intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors
  4. CVE-2023-45918ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c
  5. CVE-2023-45898kernel: use-after-free in fs/ext4/extents_status.c
  6. CVE-2023-45897exfatprogs: exfatprogs allows out-of-bounds memory access
  7. CVE-2023-45896kernel: ntfs3: kernel memory read by mounting a filesystem
  8. CVE-2023-45871kernel: IGB driver inadequate buffer size for frames larger than MTU
  9. CVE-2023-45866bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution
  10. CVE-2023-45863kernel: lib/kobject.c vulnerable to fill_kobj_path out-of-bounds write
  11. CVE-2023-45862kernel: drivers/usb/storage/ene_ub6250.c
  12. CVE-2023-45857axios: exposure of confidential data stored in cookies
  13. CVE-2023-45853zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6
  14. CVE-2023-45803urllib3: Request body not stripped after redirect from 303 status changes request method to GET
  15. CVE-2023-45802mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487)
  16. CVE-2023-45745intel-microcode: Improper input validation in some Intel(R) TDX module software
  17. CVE-2023-45733intel-microcode: Race conditions in some Intel(R) Processors
  18. CVE-2023-45648tomcat: incorrectly parsed http trailer headers can cause request smuggling
  19. CVE-2023-45539haproxy: untrimmed URI fragments may lead to exposure of confidential data on static servers
  20. CVE-2023-45322libxml2: use-after-free in xmlUnlinkNode() in tree.c
  21. CVE-2023-45290golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm
  22. CVE-2023-45289golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect
  23. CVE-2023-45288golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS
  24. CVE-2023-45287golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges.
  25. CVE-2023-45285golang: cmd/go: Protocol Fallback when fetching modules
  26. CVE-2023-45237edk2: Use of a Weak PseudoRandom Number Generator
  27. CVE-2023-45236edk2: Predictable TCP Initial Sequence Numbers
  28. CVE-2023-45235edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message
  29. CVE-2023-45234edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message
  30. CVE-2023-45233edk2: Infinite loop when parsing a PadN option in the Destination Options header
  31. CVE-2023-45232edk2: Infinite loop when parsing unknown options in the Destination Options header
  32. CVE-2023-45231edk2: Out of Bounds read when handling a ND Redirect message with truncated options
  33. CVE-2023-45230edk2: Buffer overflow in the DHCPv6 client via a long Server ID option
  34. CVE-2023-45229edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message
  35. CVE-2023-45145redis: possible bypass of Unix socket permissions on startup
  36. CVE-2023-45143node-undici: cookie leakage
  37. CVE-2023-45139fonttools: XML External Entity Injection (XXE) Vulnerability
  38. CVE-2023-45133babel: arbitrary code execution
  39. CVE-2023-44488libvpx: crash related to VP9 encoding in libvpx
  40. CVE-2023-44487HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
  41. CVE-2023-44466kernel: buffer overflow in ceph file net/ceph/messenger_v2.c
  42. CVE-2023-44446gstreamer: MXF demuxer use-after-free vulnerability
  43. CVE-2023-44444gimp: psp off-by-one RCE
  44. CVE-2023-44443gimp: psp integer overflow RCE
  45. CVE-2023-44442gimp: PSD buffer overflow RCE
  46. CVE-2023-44441gimp: dds buffer overflow RCE
  47. CVE-2023-44431bluez: AVRCP stack-based buffer overflow remote code execution vulnerability
  48. CVE-2023-44429gstreamer: AV1 codec parser heap-based buffer overflow
  49. CVE-2023-44398exiv2: Out of bounds write in function BmffImage::brotliUncompress
  50. CVE-2023-44271python-pillow: uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument
CVE 2023 document archive — Page 36 | PulseLinux