CVE 2023 document archive · 47
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
3,136 documents · Identifier year 2023 · 47 / 63
- CVE-2023-28101flatpak: Metadata with ANSI control codes can cause misleading terminal output
- CVE-2023-28100flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console
- CVE-2023-27986emacs: Emacs Lisp code injection via a crafted mailto URI
- CVE-2023-27985emacs: Shell command injection via a crafted mailto URI
- CVE-2023-27954webkitgtk: Website may be able to track sensitive user information
- CVE-2023-27932webkitgtk: Same Origin Policy bypass via crafted web content
- CVE-2023-27561runc: volume mount race condition (regression of CVE-2019-19921)
- CVE-2023-27539rubygem-rack: denial of service in header parsing
- CVE-2023-27538curl: SSH connection too eager reuse still
- CVE-2023-27537curl: HSTS double-free
- CVE-2023-27536curl: GSS delegation too eager connection re-use
- CVE-2023-27535curl: FTP too eager connection reuse
- CVE-2023-27534curl: SFTP path ~ resolving discrepancy
- CVE-2023-27533curl: TELNET option IAC injection
- CVE-2023-27530rubygem-rack: Denial of service in Multipart MIME parsing
- CVE-2023-27522httpd: mod_proxy_uwsgi HTTP response splitting
- CVE-2023-27478libmemcached: Disclosure of unrelated data
- CVE-2023-27371libmicrohttpd: remote DoS
- CVE-2023-27349BlueZ: Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability
- CVE-2023-27320sudo: double free with per-command chroot sudoers rules
- CVE-2023-27043python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple
- CVE-2023-26966libtiff: Buffer Overflow in uv_encode()
- CVE-2023-26965libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c
- CVE-2023-26924llvm: mlir:: outlineSingleBlockRegion crashes with segmentation fault
- CVE-2023-26917libyang: NULL pointer dereference via lysp_stmt_validate_value at lys_parse_mem.c
- CVE-2023-26916libyang: NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c
- CVE-2023-26819cJSON: cJSON rejects a valid text
- CVE-2023-26785mariadb: RCE vulnerability
- CVE-2023-26769liblouis: buffer overflow in Lou_Trace
- CVE-2023-26768liblouis: buffer overflow in lou_setDataPath
- CVE-2023-26767liblouis: buffer overflow in lou_logFile function at logginc.c
- CVE-2023-26607kernel: ntfs3: out-of-bounds read in ntfs_attr_find()
- CVE-2023-26606kernel: ntfs3: use-after-free read in ntfs_trim_fs()
- CVE-2023-26605kernel: fs: use-after-free in inode_cgwb_move_to_attached()
- CVE-2023-26604systemd: privilege escalation via the less pager
- CVE-2023-26590sox: floating point exception in src/aiff.c
- CVE-2023-26555ntp: an out-of-bounds write may lead to a DoS
- CVE-2023-26554ntp: an out-of-bounds write when adding a '\0' character
- CVE-2023-26553ntp: an out-of-bounds write when copying the trailing number
- CVE-2023-26552ntp: an out-of-bounds write when adding a decimal point
- CVE-2023-26551ntp: an out-of-bounds write in the cp
- CVE-2023-26545kernel: mpls: double free on sysctl allocation failure
- CVE-2023-26544kernel: ntfs3: use-after-free in run_unpack()
- CVE-2023-26464log4j1-socketappender: DoS via hashmap logging
- CVE-2023-26253glusterfs: stack-based buffer overflow in notify() in fuse-bridge.c
- CVE-2023-26242kernel: kernel: fpga: dfl-afu: integer overflow in afu_mmio_region_get_by_offset()
- CVE-2023-26159follow-redirects: Improper Input Validation due to the improper handling of URLs by the url.parse()
- CVE-2023-26136tough-cookie: prototype pollution in cookie memstore
- CVE-2023-26118angularjs: Regular Expression Denial of Service via the element
- CVE-2023-26117angularjs: Regular expression denial of service via the $resource service