PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 41

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 41 / 63

  1. CVE-2023-37464cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE
  2. CVE-2023-37460plexus-archiver: Arbitrary File Creation in AbstractUnArchiver
  3. CVE-2023-37454kernel: udf: use-after-free write in udf_close_lvid
  4. CVE-2023-37453kernel: usb: out-of-bounds read in read_descriptors
  5. CVE-2023-37450webkitgtk: arbitrary code execution
  6. CVE-2023-37369qtbase: buffer overflow in QXmlStreamReader
  7. CVE-2023-37329gstreamer-plugins-bad: heap overwrite in PGS subtitle overlay decoder
  8. CVE-2023-37328gstreamer-plugins-base: heap overwrite in subtitle parsing
  9. CVE-2023-37327gstreamer-plugins-good: integer overflow leading to heap overwrite in FLAC image tag handling
  10. CVE-2023-37211Mozilla: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13
  11. CVE-2023-37208Mozilla: Lack of warning when opening Diagcab files
  12. CVE-2023-37207Mozilla: Fullscreen notification obscured
  13. CVE-2023-37202Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey
  14. CVE-2023-37201Mozilla: Use-after-free in WebRTC certificate generation
  15. CVE-2023-36824redis: heap overflow in COMMAND GETKEYS and ACL evaluation
  16. CVE-2023-36799dotnet: Denial of Service with Client Certificates using .NET Kestrel
  17. CVE-2023-36796dotnet: Out-of-bounds write when loading PDB type records in msdia140.dll used by Visual Studio
  18. CVE-2023-36794dotnet: Buffer overflow when loading PDB type records in msdia140.dll used by Visual Studio
  19. CVE-2023-36793dotnet: Out-of-bounds write when loading PDB type records in msdia140.dll used by Visual Studio
  20. CVE-2023-36792dotnet: Out-of-bounds write when loading PDB type records in msdia140.dll used by Visual Studio
  21. CVE-2023-36788dotnet: .NET Framework Remote Code Execution Vulnerability
  22. CVE-2023-36665protobufjs: prototype pollution using user-controlled protobuf message
  23. CVE-2023-36664ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices
  24. CVE-2023-36660nettle: Memory corruption in OCB handling
  25. CVE-2023-36656jaeger-ui: xss allows an attacker to perform arbitrary jaeger queries and exfiltrate returned data
  26. CVE-2023-36632python: RecursionError: maximum recursion depth exceeded while calling a Python object
  27. CVE-2023-36617rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755
  28. CVE-2023-36558dotnet: ASP.NET Security Feature Bypass Vulnerability in Blazor forms
  29. CVE-2023-36479jetty: Improper addition of quotation marks to user inputs in CgiServlet
  30. CVE-2023-36478jetty: hpack header values cause denial of service in http/2
  31. CVE-2023-36435dotnet: memory leak in MsQuic.dll may lead to denial of service
  32. CVE-2023-36191sqlite: CLI fault on missing -nonce
  33. CVE-2023-36054krb5: Denial of service through freeing uninitialized pointer
  34. CVE-2023-36049dotnet: Arbitrary File Write and Deletion Vulnerability: FormatFtpCommand
  35. CVE-2023-35936pandoc: allows attacker to create or overwrite arbitrary files on the system
  36. CVE-2023-35829kernel: rkvdec: race condition leading to use-after-free in rkvdec_remove()
  37. CVE-2023-35828kernel: renesas_usb3: race condition leading to use-after-free in renesas_usb3_remove()
  38. CVE-2023-35827kernel: ravb: race condition leading to use-after-free in ravb_remove()
  39. CVE-2023-35826kernel: cedrus: race condition leading to use-after-free in cedrus_remove()
  40. CVE-2023-35825kernel: r592: race condition leading to use-after-free in r592_remove()
  41. CVE-2023-35824kernel: dm1105: race condition leading to use-after-free in dm1105_remove.c()
  42. CVE-2023-35823kernel: saa7134: race condition leading to use-after-free in saa7134_finidev()
  43. CVE-2023-35790libjxl: integer underflow leading to infinite loop
  44. CVE-2023-35789rabbitmq-c/librabbitmq: Insecure credentials submission
  45. CVE-2023-35788kernel: cls_flower: out-of-bounds write in fl_set_geneve_opt()
  46. CVE-2023-35391dotnet: Redis backplane in SignalR listen disclosure information to unexpected group or user
  47. CVE-2023-35390dotnet: RCE under dotnet commands
  48. CVE-2023-35116jackson-databind: denial of service via cylic dependencies
  49. CVE-2023-35074webkitgtk: processing web content may lead to arbitrary code execution
  50. CVE-2023-35001kernel: nf_tables: stack-out-of-bounds-read in nft_byteorder_eval()
CVE 2023 document archive — Page 41 | PulseLinux