PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 48

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 48 / 63

  1. CVE-2023-26116angularjs: Regular Expression Denial of Service via angular.copy()
  2. CVE-2023-26115word-wrap: ReDoS
  3. CVE-2023-26112python-configobj: Regular expression denial of service exists in ./src/configobj/validate.py
  4. CVE-2023-26049jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies
  5. CVE-2023-26048jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter()
  6. CVE-2023-25950haproxy: malformed HTTP header field name can lead to HTTP request/response smuggling
  7. CVE-2023-25815git: malicious placement of crafted messages when git was compiled with runtime prefix
  8. CVE-2023-25809runc: Rootless runc makes `/sys/fs/cgroup` writable
  9. CVE-2023-25775kernel: irdma: Improper access control
  10. CVE-2023-25752Mozilla: Potential out-of-bounds when accessing throttled streams
  11. CVE-2023-25751Mozilla: Incorrect code generation during JIT compilation
  12. CVE-2023-25746Mozilla: Memory safety bugs fixed in Firefox ESR 102.8
  13. CVE-2023-25745Mozilla: Memory safety bugs fixed in Firefox 110
  14. CVE-2023-25744Mozilla: Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  15. CVE-2023-25743Mozilla: Fullscreen notification not shown in Firefox Focus
  16. CVE-2023-25742Mozilla: Web Crypto ImportKey crashes tab
  17. CVE-2023-25741Mozilla: Same-origin policy leak via image drag and drop
  18. CVE-2023-25740Mozilla: Opening local .scf files could cause unexpected network loads
  19. CVE-2023-25739Mozilla: Use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  20. CVE-2023-25738Mozilla: Printing on Windows could potentially crash Firefox with some device drivers
  21. CVE-2023-25737Mozilla: Invalid downcast in SVGUtils::SetupStrokeGeometry
  22. CVE-2023-25736Mozilla: Invalid downcast in GetTableSelectionMode
  23. CVE-2023-25735Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey
  24. CVE-2023-25734Mozilla: Opening local .url files could cause unexpected network loads
  25. CVE-2023-25733Mozilla: Possible null pointer dereference in TaskbarPreviewCallback
  26. CVE-2023-25732Mozilla: Out of bounds memory write from EncodeInputStream
  27. CVE-2023-25731Mozilla: Prototype pollution when rendering URLPreview
  28. CVE-2023-25730Mozilla: Screen hijack via browser fullscreen mode
  29. CVE-2023-25729Mozilla: Extensions could have opened external schemes without user knowledge
  30. CVE-2023-25728Mozilla: Content security policy leak in violation reports using iframes
  31. CVE-2023-25725haproxy: request smuggling attack in HTTP/1 header parsing
  32. CVE-2023-25690httpd: HTTP request splitting with mod_rewrite and mod_proxy
  33. CVE-2023-25652git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents
  34. CVE-2023-25588binutils: Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`
  35. CVE-2023-25586binutils: Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized
  36. CVE-2023-25585binutils: Field `file_table` of `struct module *module` is uninitialized
  37. CVE-2023-25584binutils: Out of bounds read in parse_module function in bfd/vms-alpha.c
  38. CVE-2023-25577python-werkzeug: high resource usage when parsing multipart form data with many fields
  39. CVE-2023-25567gssntlmssp: out-of-bounds read when decoding target information
  40. CVE-2023-25566gssntlmssp: memory leak when parsing usernames
  41. CVE-2023-25565gssntlmssp: incorrect free when decoding target information
  42. CVE-2023-25564gssntlmssp: memory corruption when decoding UTF16 strings
  43. CVE-2023-25563gssntlmssp: multiple out-of-bounds read when decoding NTLM fields
  44. CVE-2023-25435libtiff: tiffcrop: heap-buffer-overflow in extractContigSamplesShifted8bits() in tiffcrop.c
  45. CVE-2023-25434libtiff: heap-buffer overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c
  46. CVE-2023-25433libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c
  47. CVE-2023-25399scipy: refcounting issue leads to potential memory leak
  48. CVE-2023-25363webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags()
  49. CVE-2023-25362webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps()
  50. CVE-2023-25361webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling()
CVE 2023 document archive — Page 48 | PulseLinux