PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 45

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 45 / 63

  1. CVE-2023-30772kernel: da9150: race condition leading to use-after-free in da9150_charger_remove()
  2. CVE-2023-30630dmidecode: dump-bin to overwrite a local file
  3. CVE-2023-30590nodejs: DiffieHellman do not generate keys after setting a private key
  4. CVE-2023-30589nodejs: HTTP Request Smuggling via Empty headers separated by CR
  5. CVE-2023-30588nodejs: process interuption due to invalid Public Key information in x509 certificates
  6. CVE-2023-30587nodejs: inspector protocol bypass the experimental permission model
  7. CVE-2023-30586nodejs: OpenSSL engines can be used to bypass the permission model
  8. CVE-2023-30585nodejs: privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process
  9. CVE-2023-30584nodejs: path traversal bypass in experimental permission model
  10. CVE-2023-30583nodejs: fs.openAsBlob bypass in experimental permission model
  11. CVE-2023-30582nodejs: fs.watchFile bypass in experimental permission model
  12. CVE-2023-30581nodejs: mainModule.proto bypass experimental policy mechanism
  13. CVE-2023-30577amanda: Improper argument checking for runtar.c
  14. CVE-2023-30571libarchive: Race condition in multi-threaded use of archive_write_disk_header() on posix based systems
  15. CVE-2023-30570libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan
  16. CVE-2023-30551rekor: compressed archives can result in OOM conditions
  17. CVE-2023-30456kernel: KVM: nVMX: missing consistency checks for CR0 and CR4
  18. CVE-2023-30441JDK: exposure of sensitive information using a combination of flaws and configurations
  19. CVE-2023-30086libtiff: Heap buffer overflow in tiffcp() at tiffcp.c
  20. CVE-2023-30079libeconf: Stack overflow in function read_file at libeconf/lib/getfilecontents.c
  21. CVE-2023-30078libeconf: Stack overflow in function econf_writeFile at libeconf/lib/libeconf.c
  22. CVE-2023-29942llvm: convert-spirv-to-llvm Pass trigger Segmentation fault in LLVMStructType verifier
  23. CVE-2023-29941llvm: sparse-buffer-rewrite pass crashes with Segmentation fault
  24. CVE-2023-29935llvm: gpu-to-llvm Pass crashed with error message
  25. CVE-2023-29934llvm: convert-scf-to-spirv Pass crashed with segmentation fault
  26. CVE-2023-29933llvm: one shot bufferize crashed with segmentation fault
  27. CVE-2023-29932llvm: canonicalize pass crashed with segmentation fault
  28. CVE-2023-29824scipy: use-after-free in Py_FindObjects() function
  29. CVE-2023-29552openslp: Reflective denial of service amplification attack via UDP
  30. CVE-2023-29550Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10
  31. CVE-2023-29548Mozilla: Incorrect optimization result on ARM64
  32. CVE-2023-29545Mozilla: Windows Save As dialog resolved environment variables
  33. CVE-2023-29542Mozilla: Bypass of file download extension restrictions
  34. CVE-2023-29541Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux
  35. CVE-2023-29539Mozilla: Content-Disposition filename truncation leads to Reflected File Download
  36. CVE-2023-29536Mozilla: Invalid free from JavaScript code
  37. CVE-2023-29535Mozilla: Potential Memory Corruption following Garbage Collector compaction
  38. CVE-2023-29533Mozilla: Fullscreen notification obscured
  39. CVE-2023-29532Mozilla: Mozilla Maintenance Service Write-lock bypass
  40. CVE-2023-29531Mozilla: Out-of-bound memory access in WebGL on macOS
  41. CVE-2023-29499glib: GVariant offset table entry size is not checked in is_normal()
  42. CVE-2023-29491ncurses: Local users can trigger security-relevant memory corruption via malformed data
  43. CVE-2023-29483dnspython: denial of service in stub resolver
  44. CVE-2023-29479Thunderbird: Hang when processing certain OpenPGP messages
  45. CVE-2023-29469libxml2: Hashing of empty dict strings isn't deterministic
  46. CVE-2023-29409golang: crypto/tls: slow verification of certificate chains containing large RSA keys
  47. CVE-2023-29406golang: net/http: insufficient sanitization of Host header
  48. CVE-2023-29405golang: cmd/cgo: Arbitrary code execution triggered by linker flags
  49. CVE-2023-29404golang: cmd/go: go command may execute arbitrary code at build time when using cgo
  50. CVE-2023-29403golang: runtime: unexpected behavior of setuid/setgid binaries
CVE 2023 document archive — Page 45 | PulseLinux