PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 38

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 38 / 63

  1. CVE-2023-41419python-gevent: privilege escalation via a crafted script to the WSGIServer component
  2. CVE-2023-41361frr: does not check for an overly large length of the rcv software version
  3. CVE-2023-41360frr: ahead-of-stream read of ORF header
  4. CVE-2023-41359frr: out of bounds read in bgp_attr_aigp_valid
  5. CVE-2023-41358frr: processes invalid NLRIs if attribute length is zero
  6. CVE-2023-41175libtiff: potential integer overflow in raw2tiff.c
  7. CVE-2023-41105python: file path truncation at \0 characters
  8. CVE-2023-41081httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure
  9. CVE-2023-41080tomcat: Open Redirect vulnerability in FORM authentication
  10. CVE-2023-41074webkitgtk: processing web content may lead to arbitrary code execution
  11. CVE-2023-41056redis: Heap Buffer Overflow may lead to potential remote code execution
  12. CVE-2023-41053redis: Redis SORT_RO may bypass ACL configuration
  13. CVE-2023-40857yara: buffer overflow that allows a remote attacker to execute arbtirary code via the yr_execute_cod function
  14. CVE-2023-40791kernel: lib/scatterlist.c fails to unpin pages
  15. CVE-2023-40745libtiff: integer overflow in tiffcp.c
  16. CVE-2023-40661OpenSC: multiple memory issues with pkcs15-init (enrollment tool)
  17. CVE-2023-40660OpenSC: Potential PIN bypass when card tracks its own login state
  18. CVE-2023-40589freerdp: buffer overflow in ncrush_decompress causes crash with crafted input
  19. CVE-2023-40576freerdp: Out-Of-Bounds Read in RleDecompress
  20. CVE-2023-40575freerdp: Out-Of-Bounds Read in general_YUV444ToRGB_8u_P3AC4R_BGRX
  21. CVE-2023-40574freerdp: Out-Of-Bounds Write in general_YUV444ToRGB_8u_P3AC4R_BGRX
  22. CVE-2023-40569freerdp: Out-of-bounds write in the `progressive_decompress` function due to incorrect calculations
  23. CVE-2023-40567freerdp: Out-of-bounds write in clear_decompress_bands_data
  24. CVE-2023-40551shim: out of bounds read when parsing MZ binaries
  25. CVE-2023-40550shim: Out-of-bound read in verify_buffer_sbat()
  26. CVE-2023-40549shim: Out-of-bounds read in verify_buffer_authenticode() malformed PE file
  27. CVE-2023-40548shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
  28. CVE-2023-40547shim: RCE in http boot support may lead to Secure Boot bypass
  29. CVE-2023-40546shim: Out-of-bounds read printing error messages
  30. CVE-2023-40476gstreamer-plugins-bad: Integer overflow in H.265 video parser leading to stack overwrite
  31. CVE-2023-40475gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio
  32. CVE-2023-40474gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video
  33. CVE-2023-40451webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code
  34. CVE-2023-40414webkitgtk: Processing web content may lead to arbitrary code execution
  35. CVE-2023-40403libxslt: Processing web content may disclose sensitive information
  36. CVE-2023-40397webkitgtk: arbitrary javascript code execution
  37. CVE-2023-40360QEMU: NVMe: NULL pointer dereference in nvme_directive_receive()
  38. CVE-2023-40359xterm: ReGIS reporting for character-set names containing characters other than alphanumerics or underscore.
  39. CVE-2023-40305indent: heap-based buffer overflow in search_brace() in indent.c
  40. CVE-2023-40283kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c
  41. CVE-2023-40225haproxy: Proxy forwards malformed empty Content-Length headers
  42. CVE-2023-40217python: TLS handshake bypass
  43. CVE-2023-40188freerdp: Out-of-bounds read in general_LumaToYUV444
  44. CVE-2023-40187freerdp: Use-After-Free in avc420_ensure_buffer, avc444_ensure_buffer
  45. CVE-2023-40186freerdp: Integer overflow leading to out-of-bound write vulnerability in gdi_CreateSurface
  46. CVE-2023-40181freerdp: integer-Underflow leading to Out-Of-Bound Read in zgfx_decompress_segment
  47. CVE-2023-40167jetty: Improper validation of HTTP/1 content-length
  48. CVE-2023-39978ImageMagick: Memory leak in Magick::Draw
  49. CVE-2023-39976libqb: Buffer overflow in log_blackbox.c
  50. CVE-2023-39975krb5: double-free in KDC TGS processing
CVE 2023 document archive — Page 38 | PulseLinux