PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 39

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 39 / 63

  1. CVE-2023-39928webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports
  2. CVE-2023-39804tar: Incorrectly handled extension attributes in PAX archives can lead to a crash
  3. CVE-2023-39742giflib: giflib: Denial of Service via getarg.c
  4. CVE-2023-39615libxml2: crafted xml can cause global buffer overflow
  5. CVE-2023-39593mariadb: authenticated RCE vulnerability
  6. CVE-2023-39434webkitgtk: processing web content may lead to arbitrary code execution
  7. CVE-2023-39418postgresql: MERGE fails to enforce UPDATE or SELECT row security policies
  8. CVE-2023-39417postgresql: extension script @substitutions@ within quoting allow SQL injection
  9. CVE-2023-39410apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
  10. CVE-2023-39368kernel: Possible Denial of Service on Intel(R) Processors
  11. CVE-2023-39356freerdp: missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect
  12. CVE-2023-39355freerdp: use-after-free in RDPGFX_CMDID_RESETGRAPHICS
  13. CVE-2023-39354freerdp: Out-Of-Bounds Read in nsc_rle_decompress_data
  14. CVE-2023-39353freerdp: missing offset validation leading to Out Of Bound Read
  15. CVE-2023-39352freerdp: invalid offset validation leading to Out Of Bound Write
  16. CVE-2023-39351freerdp: Null Pointer Dereference leading DOS in RemoteFX
  17. CVE-2023-39350freerdp: Incorrect offset calculation leading to DOS
  18. CVE-2023-39333nodejs: code injection via WebAssembly export names
  19. CVE-2023-39332nodejs: path traversal through path stored in Uint8Array
  20. CVE-2023-39331nodejs: permission model improperly protects against path traversal
  21. CVE-2023-39329openjpeg: Resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c
  22. CVE-2023-39328openjpeg: denail of service via crafted image file
  23. CVE-2023-39327openjpeg: Malicious files can cause the program to enter a large loop
  24. CVE-2023-39326golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests
  25. CVE-2023-39325golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)
  26. CVE-2023-39323golang: cmd/go: line directives allows arbitrary execution during build
  27. CVE-2023-39322golang: crypto/tls: lack of a limit on buffered post-handshake
  28. CVE-2023-39321golang: crypto/tls: panic when processing post-handshake message on QUIC connections
  29. CVE-2023-39320golang: cmd/go: go.mod toolchain directive allows arbitrary execution
  30. CVE-2023-39319golang: html/template: improper handling of special tags within script contexts
  31. CVE-2023-39318golang: html/template: improper handling of HTML-like comments within script contexts
  32. CVE-2023-39198kernel: QXL: race condition leading to use-after-free in qxl_mode_dumb_create()
  33. CVE-2023-39197kernel: DCCP: conntrack out-of-bounds read in nf_conntrack_dccp_packet()
  34. CVE-2023-39195kernel: rsvp: out-of-bounds read in rsvp_classify()
  35. CVE-2023-39194kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()
  36. CVE-2023-39193kernel: netfilter: xtables sctp out-of-bounds read in match_flags()
  37. CVE-2023-39192kernel: netfilter: xtables out-of-bounds read in u32_match_it()
  38. CVE-2023-39191kernel: eBPF: insufficient stack type checks in dynptr
  39. CVE-2023-39190kernel: sch_qfq: net scheduler out-of-bounds write in qfq_update_agg()
  40. CVE-2023-39189kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()
  41. CVE-2023-39180kernel: ksmbd: Read Request Memory Leak Denial-of-Service Vulnerability
  42. CVE-2023-39179kernel: ksmbd: Read Request Out-Of-Bounds Read Information Disclosure Vulnerability
  43. CVE-2023-39176kernel: ksmbd: Transform Header Out-Of-Bounds Read Information Disclosure Vulnerability
  44. CVE-2023-39130gdb: heap-buffer-overflow in pe_as16(void*)
  45. CVE-2023-39129gdb: heap-use-after-free /home/root/sp/Dataset/Binutils/binutils_aflpp/gdb/coff-pe-read.c:137:27
  46. CVE-2023-39128gdb: dynamic-stack-buffer-overflow in ada_decode[abi:cxx11](char const*, bool, bool)
  47. CVE-2023-38898python: sensitive information can be obtained via the _asyncio._swap_current_task component.
  48. CVE-2023-38802frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router
  49. CVE-2023-38745pandoc: allows attacker to create or overwrite arbitrary files on the system (incomplete fix in upstream for CVE-2023-35936)
  50. CVE-2023-38712libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart
CVE 2023 document archive — Page 39 | PulseLinux