CVE 2023 document archive · 40
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
3,136 documents · Identifier year 2023 · 40 / 63
- CVE-2023-38711libreswan: Invalid IKEv1 Quick Mode ID causes restart
- CVE-2023-38710libreswan: Invalid IKEv2 REKEY proposal causes restart
- CVE-2023-38709httpd: HTTP response splitting
- CVE-2023-38668nasm: stack-based buffer overflow in disasm()
- CVE-2023-38667nasm: stack-based buffer overflow in disasm()
- CVE-2023-38665nasm: NULL pointer dereference in ieee_write_file()
- CVE-2023-38633librsvg: Arbitrary file read when xinclude href has special characters
- CVE-2023-38611webkitgtk: arbitrary code execution
- CVE-2023-38600webkitgtk: arbitrary code execution
- CVE-2023-38599webkitgtk: track sensitive user information
- CVE-2023-38597webkitgtk: arbitrary code execution
- CVE-2023-38595webkitgtk: arbitrary code execution
- CVE-2023-38594webkitgtk: arbitrary code execution
- CVE-2023-38592webkitgtk: Processing web content may lead to arbitrary code execution
- CVE-2023-38575kernel: Local information disclosure in some Intel(R) processors
- CVE-2023-38572webkitgtk: bypass Same Origin Policy
- CVE-2023-38560ghostscript: Integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name
- CVE-2023-38559ghostscript: Out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in DoS
- CVE-2023-38552nodejs: integrity checks according to policies can be circumvented
- CVE-2023-38546curl: cookie injection with none file
- CVE-2023-38545curl: heap based buffer overflow in the SOCKS5 proxy handshake
- CVE-2023-38497rust-cargo: cargo does not respect the umask when extracting dependencies
- CVE-2023-38473avahi: Reachable assertion in avahi_alternative_host_name
- CVE-2023-38472avahi: Reachable assertion in avahi_rdata_parse
- CVE-2023-38471avahi: Reachable assertion in dbus_set_host_name
- CVE-2023-38470avahi: Reachable assertion in avahi_escape_label
- CVE-2023-38469avahi: Reachable assertion in avahi_dns_packet_append_record
- CVE-2023-38432kernel: ksmbd: out-of-bounds read in ksmbd_smb2_check_message
- CVE-2023-38427kernel: ksmbd: integer underflow and out-of-bounds read in deassemble_neg_contexts
- CVE-2023-38409kernel: fbcon: out-of-sync arrays in fbcon_mode_deleted due to wrong con2fb_map assignment
- CVE-2023-38408openssh: Remote code execution in ssh-agent PKCS#11 support
- CVE-2023-38407ffr: Out of bounds read in bgpd/bgp_label.c
- CVE-2023-38406ffr: Flowspec overflow in bgpd/bgp_flowspec.c
- CVE-2023-38403iperf3: memory allocation hazard and crash
- CVE-2023-38325python-cryptography: SSH certificate encoding/parsing incompatibility with OpenSSH
- CVE-2023-38285mod_security: DoS Vulnerability in Four Transformations
- CVE-2023-38264JDK: Object Request Broker (ORB) denial of service
- CVE-2023-38201Keylime: challenge-response protocol bypass during agent registration
- CVE-2023-38200keylime: registrar is subject to a DoS against SSL connections
- CVE-2023-38197qtbase: infinite loops in QXmlStreamReader
- CVE-2023-38180dotnet: Kestrel vulnerability to slow read attacks leading to Denial of Service attack
- CVE-2023-38178dotnet: ASP.NET Kestrel stream flow control leads to Denial of Service
- CVE-2023-38171dotnet: NULL pointer dereference in MsQuic.dll may lead to denial of service
- CVE-2023-38133webkitgtk: disclose sensitive information
- CVE-2023-38103gstreamer1-plugins-ugly-free: GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability
- CVE-2023-38039curl: out of heap memory issue due to missing limit on header quantity
- CVE-2023-37920python-certifi: Removal of e-Tugra root certificate
- CVE-2023-37788goproxy: Denial of service (DoS) via unspecified vectors.
- CVE-2023-37732yasm: SEGV in yasm/libyasm/intnum.c in function yasm_intnum_copy()
- CVE-2023-37536xerces-c: An integer overflow issue that allows remote attackers to cause out-of-bound access via HTTP request