PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 37

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 37 / 63

  1. CVE-2023-44270PostCSS: Improper input validation in PostCSS
  2. CVE-2023-43907optipng: global buffer overflow via the 'buffer' variable at gifread.c.
  3. CVE-2023-43804python-urllib3: Cookie request header isn't stripped during cross-origin redirects
  4. CVE-2023-43789libXpm: out of bounds read on XPM with corrupted colormap
  5. CVE-2023-43788libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  6. CVE-2023-43787libX11: integer overflow in XCreateImage() leading to a heap overflow
  7. CVE-2023-43786libX11: stack exhaustion from infinite recursion in PutSubImage()
  8. CVE-2023-43785libX11: out-of-bounds memory access in _XkbReadKeySyms()
  9. CVE-2023-43758microcode_ctl: Improper input validation in UEFI firmware
  10. CVE-2023-43646get-func-name: ReDoS in chai module
  11. CVE-2023-43642snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact
  12. CVE-2023-43641libcue: out-of-bounds array access leads to RCE
  13. CVE-2023-43628gpsd: integer overflow
  14. CVE-2023-43622httpd: mod_http2: DoS in HTTP/2 with initial window size 0
  15. CVE-2023-43490kernel: Local information disclosure on Intel(R) Xeon(R) D processors with Intel(R) SGX due to incorrect calculation in microcode
  16. CVE-2023-43361vorbis-tools: Buffer Overflow vulnerability
  17. CVE-2023-43115Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents
  18. CVE-2023-43114qt: corrupted font loaded via QFontDatabase::addApplicationFont{FromData] leads to DoS
  19. CVE-2023-43090gnome-shell: Screenshot tool allows viewing open windows when session is locked
  20. CVE-2023-43010webkitgtk: Processing maliciously crafted web content may lead to memory corruption
  21. CVE-2023-43000webkitgtk: Processing maliciously crafted web content may lead to memory corruption
  22. CVE-2023-42970webkitgtk: Processing web content may lead to arbitrary code execution
  23. CVE-2023-42956webkit: processing malicious web content may lead to a denial of service
  24. CVE-2023-42950webkit: heap use-after-free may lead to arbitrary code execution
  25. CVE-2023-42917webkitgtk: Arbitrary Remote Code Execution
  26. CVE-2023-42916webkitgtk: Out-of-bounds read leads to sensitive data leak
  27. CVE-2023-42890webkitgtk: processing malicious web content may lead to arbitrary code execution
  28. CVE-2023-42883webkitgtk: processing a malicious image may lead to a denial of service
  29. CVE-2023-42875webkitgtk: Processing web content may lead to arbitrary code execution
  30. CVE-2023-42852webkitgtk: Processing web content may lead to arbitrary code execution
  31. CVE-2023-42843webkit: visiting a malicious website may lead to address bar spoofing
  32. CVE-2023-42833webkitgtk: Processing web content may lead to arbitrary code execution
  33. CVE-2023-42795tomcat: improper cleaning of recycled objects could lead to information leak
  34. CVE-2023-42794tomcat: FileUpload: DoS due to accumulation of temporary files on Windows
  35. CVE-2023-42756kernel: netfilter: race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP
  36. CVE-2023-42755kernel: rsvp: out-of-bounds read in rsvp_classify()
  37. CVE-2023-42754kernel: ipv4: NULL pointer dereference in ipv4_send_dest_unreach()
  38. CVE-2023-42753kernel: netfilter: potential slab-out-of-bound access due to integer underflow
  39. CVE-2023-42752kernel: integer overflow in igmpv3_newpack leading to exploitable memory access
  40. CVE-2023-42670samba: AD DC Busy RPC multiple listener DoS
  41. CVE-2023-42669samba: "rpcecho" development server allows denial of service via sleep() call on AD DC
  42. CVE-2023-42467QEMU: am53c974: denial of service due to division by zero
  43. CVE-2023-42465sudo: Targeted Corruption of Register and Stack Variables
  44. CVE-2023-42282nodejs-ip: arbitrary code execution via the isPublic() function
  45. CVE-2023-41993webkitgtk: processing malicious web content may lead to arbitrary code execution
  46. CVE-2023-41983webkitgtk: Processing web content may lead to a denial of service
  47. CVE-2023-41915pmix: race condition allows attackers to obtain ownership of arbitrary files
  48. CVE-2023-41910lldpd: CDP PDU Packet cdp.c out-of-bounds read
  49. CVE-2023-41909frr: NULL pointer dereference in bgp_nlri_parse_flowspec() in bgpd/bgp_flowspec.c
  50. CVE-2023-41900jetty: OpenId Revoked authentication allows one request
CVE 2023 document archive — Page 37 | PulseLinux