PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 42

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 42 / 63

  1. CVE-2023-34981tomcat: response headers from the previous request leading to an information leak
  2. CVE-2023-34969dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered
  3. CVE-2023-34968samba: spotlight server-side share path disclosure
  4. CVE-2023-34967samba: type confusion in mdssvc RPC service for spotlight
  5. CVE-2023-34966samba: infinite loop in mdssvc RPC service for spotlight
  6. CVE-2023-34872poppler: Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.
  7. CVE-2023-34475ImageMagick: heap use-after-free issue in ReplaceXmpValue() function in MagickCore/profile.c.
  8. CVE-2023-34474ImageMagick: heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  9. CVE-2023-34462netty: SniHandler 16MB allocation leads to OOM
  10. CVE-2023-34455snappy-java: Unchecked chunk length leads to DoS
  11. CVE-2023-34454snappy-java: Integer overflow in compress leads to DoS
  12. CVE-2023-34453snappy-java: Integer overflow in shuffle leads to DoS
  13. CVE-2023-34440microcode_ctl: Improper input validation in UEFI firmware
  14. CVE-2023-34432sox: heap-buffer-overflow in src/formats_i.c
  15. CVE-2023-34416Mozilla: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12
  16. CVE-2023-34414Mozilla: Click-jacking certificate exceptions through rendering lag
  17. CVE-2023-34410qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation
  18. CVE-2023-34319xen: buffer overrun in netback due to unusual packet (XSA-432)
  19. CVE-2023-34318sox: heap-buffer-overflow in src/hcom.c
  20. CVE-2023-34241cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  21. CVE-2023-34153ImageMagick: Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  22. CVE-2023-34152ImageMagick: RCE (shell command injection) vulnerability in OpenBlob with --enable-pipes configured
  23. CVE-2023-34151ImageMagick: Undefined behaviors of casting double to size_t in svg, mvg and other coders
  24. CVE-2023-34059open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper
  25. CVE-2023-34058open-vm-tools: SAML token signature bypass
  26. CVE-2023-34055spring-boot: org.springframework.boot: spring-boot-actuator class vulnerable to denial of service
  27. CVE-2023-34050springframework-amqp: Deserialization Vulnerability
  28. CVE-2023-33953gRPC: hpack table accounting errors can lead to denial of service
  29. CVE-2023-33952kernel: vmwgfx: double free within the handling of vmw_buffer_object objects
  30. CVE-2023-33951kernel: vmwgfx: race condition leading to information disclosure vulnerability
  31. CVE-2023-33733python-reportlab: remote code execution via supplying a crafted PDF file
  32. CVE-2023-33461iniparser: NULL pointer cause crash in iniparser_getboolean
  33. CVE-2023-33460yajl: Memory leak in yajl_tree_parse function
  34. CVE-2023-33288kernel: use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c
  35. CVE-2023-33285qt: buffer over-read via a crafted reply from a DNS server
  36. CVE-2023-33250kernel: use-after-free in iopt_unmap_iova_range() in Linux kernel
  37. CVE-2023-33204sysstat: check_overflow() function can work incorrectly that lead to an overflow
  38. CVE-2023-33203kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove()
  39. CVE-2023-33202bc-java: Out of memory while parsing ASN.1 crafted data in org.bouncycastle.openssl.PEMParser class
  40. CVE-2023-33170dotnet: race condition in Core SignInManager PasswordSignInAsync method
  41. CVE-2023-33135dotnet: Elevation of Privilege - dotnet tool restore command Local Privilege Escalation Vulnerability
  42. CVE-2023-33128dotnet: Remote Code Execution - Source generators issue can lead to a crash due to unmanaged heap corruption
  43. CVE-2023-33127dotnet: elevation of privilege and code execution by taking control of the diagnostic port
  44. CVE-2023-33126dotnet: Remote Code Execution - dotnet format command cwd dll hijack vulnerability
  45. CVE-2023-32731gRPC: sensitive information disclosure
  46. CVE-2023-32700texlive: arbitrary code execution allows document complied with older version
  47. CVE-2023-32681python-requests: Unintended leak of Proxy-Authorization header
  48. CVE-2023-32665glib: GVariant deserialisation does not match spec for non-normal data
  49. CVE-2023-32643glib: Heap-buffer-overflow in g_variant_serialised_get_child
  50. CVE-2023-32636glib: Timeout in fuzz_variant_text
CVE 2023 document archive — Page 42 | PulseLinux