PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 46

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 46 / 63

  1. CVE-2023-29402golang: cmd/go: go command may generate unexpected code at build time when using cgo
  2. CVE-2023-29400golang: html/template: improper handling of empty HTML attributes
  3. CVE-2023-29383shadow: Improper input validation in shadow-utils package utility chfn
  4. CVE-2023-29337dotnet: vulnerability exists in NuGet where a potential race condition can lead to a symlink attack
  5. CVE-2023-29331dotnet: .NET Kestrel: Denial of Service processing X509 Certificates
  6. CVE-2023-29326dotnet: Remote Code Execution Vulnerability
  7. CVE-2023-29132irssi: a use after free possible under special circumstances
  8. CVE-2023-29007git: arbitrary configuration injection when renaming or deleting a section from a configuration file
  9. CVE-2023-28938mdadm: Uncontrolled resource consumption
  10. CVE-2023-28882mod_security: a segfault and a resultant crash of a worker process in some configurations with certain inputs
  11. CVE-2023-28879ghostscript: buffer overflow in base/sbcp.c leading to data corruption
  12. CVE-2023-28866kernel: Bluetooth: HCI: global out-of-bounds access in net/bluetooth/hci_sync.c
  13. CVE-2023-28856redis: Insufficient validation of HINCRBYFLOAT command
  14. CVE-2023-28772kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow
  15. CVE-2023-28756ruby: ReDoS vulnerability in Time
  16. CVE-2023-28755ruby: ReDoS vulnerability in URI
  17. CVE-2023-28746kernel: Local information disclosure on Intel(R) Atom(R) processors
  18. CVE-2023-28736mdadm: Buffer overflow
  19. CVE-2023-28709tomcat: Fix for CVE-2023-24998 was incomplete
  20. CVE-2023-28708tomcat: not including the secure attribute causes information disclosure
  21. CVE-2023-28642runc: AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration
  22. CVE-2023-28625mod_auth_openidc: NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied
  23. CVE-2023-28617emacs: command injection vulnerability in org-mode
  24. CVE-2023-28531openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.
  25. CVE-2023-28487sudo: Sudo does not escape control characters in sudoreplay output
  26. CVE-2023-28486sudo: Sudo does not escape control characters in log messages
  27. CVE-2023-28484libxml2: NULL dereference in xmlSchemaFixupComplexType
  28. CVE-2023-28466kernel: tls: race condition in do_tls_getsockopt may lead to use-after-free or NULL pointer dereference
  29. CVE-2023-28464Kernel: double free in hci_conn_cleanup of the bluetooth subsystem
  30. CVE-2023-28450dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232
  31. CVE-2023-28427Mozilla: Matrix SDK bundled with Thunderbird vulnerable to denial-of-service attack
  32. CVE-2023-28425redis: Specially crafted MSETNX command can lead to denial-of-service
  33. CVE-2023-28410hw: Intel: Improper restriction in memory buffer in graphics drivers cause escalation of privilege
  34. CVE-2023-28370python-tornado: open redirect vulnerability in StaticFileHandler under certain configurations
  35. CVE-2023-28328kernel: Denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c
  36. CVE-2023-28327kernel: denial of service problem in net/unix/diag.c
  37. CVE-2023-28322curl: more POST-after-PUT confusion
  38. CVE-2023-28321curl: IDN wildcard match may lead to Improper Cerificate Validation
  39. CVE-2023-28319curl: use after free in SSH sha256 fingerprint check
  40. CVE-2023-28260dotnet: CWD dll hijack vulnerability
  41. CVE-2023-28205WebKitGTK: use-after-free leads to arbitrary code execution
  42. CVE-2023-28204webkitgtk: an out-of-bounds read when processing malicious content
  43. CVE-2023-28198webkitgtk: use after free vulnerability
  44. CVE-2023-28176Mozilla: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9
  45. CVE-2023-28164Mozilla: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation
  46. CVE-2023-28163Mozilla: Windows Save As dialog resolved environment variables
  47. CVE-2023-28162Mozilla: Invalid downcast in Worklets
  48. CVE-2023-28155request: bypass of SSRF mitigations when following a cross-protocol redirect
  49. CVE-2023-28154webpack: avoid cross-realm objects
  50. CVE-2023-28119crewjam/saml: Denial Of Service Via Deflate Decompression Bomb
CVE 2023 document archive — Page 46 | PulseLinux