PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 43

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 43 / 63

  1. CVE-2023-32629kernel: overlayfs: In Ubuntu skip permission checking for trusted.overlayfs.* xattrs
  2. CVE-2023-32627sox: floating point exception in src/voc.c
  3. CVE-2023-32611glib: g_variant_byteswap() can take a long time with some non-normal inputs
  4. CVE-2023-32573qt: Uninitialized variable usage in m_unitsPerEm
  5. CVE-2023-32559nodejs: Permissions policies can be bypassed via process.binding
  6. CVE-2023-32558nodejs: process.binding() can bypass the permission model through path traversal
  7. CVE-2023-32439webkitgtk: type confusion issue leading to arbitrary code execution
  8. CVE-2023-32435webkitgtk: memory corruption issue leading to arbitrary code execution
  9. CVE-2023-32409webkitgtk: remote attacker may be able to break out of the Web Content sandbox
  10. CVE-2023-32393webkitgtk: arbitrary code execution
  11. CVE-2023-32373webkitgtk: a use-after-free when processing maliciously crafted web content
  12. CVE-2023-32370webkitgtk: content security policy blacklist failure
  13. CVE-2023-32360cups: Information leak through Cups-Get-Document operation
  14. CVE-2023-32359webkitgtk: User password may be read aloud by a text-to-speech accessibility feature
  15. CVE-2023-32324cups: heap buffer overflow may lead to DoS
  16. CVE-2023-32269kernel: user after free in nr_listen in net/netrom/af_netrom.c
  17. CVE-2023-32258kernel: ksmbd: session race condition remote code execution vulnerability
  18. CVE-2023-32257kernel: ksmbd: session race condition remote code execution vulnerability
  19. CVE-2023-32256kernel: ksmbd race issue from smb2 close and logoff with multichannel
  20. CVE-2023-32255kernel: Memory leak via ksmbd session setup request with unknown NTLMSSP message type
  21. CVE-2023-32254kernel: ksmbd: tree connection race condition remote code execution vulnerability
  22. CVE-2023-32253kernel: Deadlock in ksmbd_find_crypto_ctx()
  23. CVE-2023-32252kernel: ksmbd: session NULL pointer dereference denial-of-service vulnerability
  24. CVE-2023-32251kernel: ksmbd brute force delay bypass via asynchronous requests
  25. CVE-2023-32250kernel: ksmbd: session race condition remote code execution vulnerability
  26. CVE-2023-32249kernel: ksmbd: not allow guest user on multichannel
  27. CVE-2023-32248kernel: ksmbd: tree connection NULL pointer dereference denial-of-service vulnerability
  28. CVE-2023-32247kernel: ksmbd: session setup memory exhaustion denial-of-service vulnerability
  29. CVE-2023-32246kernel: ksmbd: call rcu_barrier() in ksmbd_server_exit()
  30. CVE-2023-32233kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation
  31. CVE-2023-32215Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11
  32. CVE-2023-32214Mozilla: Potential DoS via exposed protocol handlers
  33. CVE-2023-32213Mozilla: Potential memory corruption in FileReader::DoReadData()
  34. CVE-2023-32212Mozilla: Potential spoof due to obscured address bar
  35. CVE-2023-32211Mozilla: Content process crash due to invalid wasm code
  36. CVE-2023-32207Mozilla: Potential permissions request bypass via clickjacking
  37. CVE-2023-32206Mozilla: Crash in RLBox Expat driver
  38. CVE-2023-32205Mozilla: Browser prompts could have been obscured by popups
  39. CVE-2023-32190mlocate: mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable
  40. CVE-2023-32181libeconf: stack-based buffer overflow in econf_writeFile() in lib/libeconf.c
  41. CVE-2023-32082etcd: Key name can be accessed via LeaseTimeToLive API
  42. CVE-2023-32067c-ares: 0-byte UDP payload Denial of Service
  43. CVE-2023-32032dotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument
  44. CVE-2023-32006nodejs: Permissions policies can impersonate other modules in using module.constructor.createRequire()
  45. CVE-2023-32005nodejs: fs.statfs can retrive stats from files restricted by the Permission Model
  46. CVE-2023-32004nodejs: Permission model bypass by specifying a path traversal sequence in a Buffer
  47. CVE-2023-32003nodejs: fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks
  48. CVE-2023-32002nodejs: Permissions policies can be bypassed via Module._load
  49. CVE-2023-32001curl: fopen race condition
  50. CVE-2023-31722nasm: heap buffer overflow in expand_mmacro() asm/preproc.c
CVE 2023 document archive — Page 43 | PulseLinux