PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 49

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 49 / 63

  1. CVE-2023-25360webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer()
  2. CVE-2023-25358webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()
  3. CVE-2023-25193harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks
  4. CVE-2023-25173containerd: Supplementary groups are not set up properly
  5. CVE-2023-25155redis: String matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a denial-of-service attack
  6. CVE-2023-25139glibc: incorrect printf output for integers with thousands separator and width field
  7. CVE-2023-25136openssh: the functions order_hostkeyalgs() and list_hostkey_types() leads to double-free vulnerability
  8. CVE-2023-25012kernel: hid: use-after-free in bigben_set_led()
  9. CVE-2023-24998FileUpload: FileUpload DoS with excessive parts
  10. CVE-2023-24936dotnet: Bypass restrictions when deserializing a DataSet or DataTable from XML
  11. CVE-2023-24897dotnet: RemoteCodeExecution - Out-of-bounds write when loading PDB type records in msdia140.dll used by Visual Studio
  12. CVE-2023-24895dotnet: RCE in WPF's handling of XAML Frame elements
  13. CVE-2023-24824cmark-gfm: Quadratic complexity bugs may lead to a denial of service
  14. CVE-2023-24807Node.js: Regular Expression Denial of Service in Headers fetch API
  15. CVE-2023-24805cups-filters: remote code execution in cups-filters, beh CUPS backend
  16. CVE-2023-24626screen: allows sending SIGHUP to arbitrary PIDs
  17. CVE-2023-24607qt5: A possible DOS involving the Qt SQL ODBC driver plugin
  18. CVE-2023-24540golang: html/template: improper handling of JavaScript whitespace
  19. CVE-2023-24539golang: html/template: improper sanitization of CSS values
  20. CVE-2023-24538golang: html/template: backticks not treated as string delimiters
  21. CVE-2023-24537golang: go/parser: Infinite loop in parsing
  22. CVE-2023-24536golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  23. CVE-2023-24535golang/Protobuf: panic when parsing an incomplete number
  24. CVE-2023-24534golang: net/http, net/textproto: denial of service from excessive memory allocation
  25. CVE-2023-24532golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results
  26. CVE-2023-24329python: urllib.parse url blocklisting bypass
  27. CVE-2023-24056pkgconf: unbounded string expansion due to incorrect checks may result in buffer overflow
  28. CVE-2023-24039motif: libXm: stack-based buffer overflow in ParseColors()
  29. CVE-2023-24023kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses
  30. CVE-2023-24021modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass
  31. CVE-2023-23946git: git apply: a path outside the working tree can be overwritten with crafted input
  32. CVE-2023-23936Node.js: Fetch API did not protect against CRLF injection in host headers
  33. CVE-2023-23934python-werkzeug: cookie prefixed with = can shadow unprefixed cookie
  34. CVE-2023-23931python-cryptography: memory corruption via immutable objects
  35. CVE-2023-23920Node.js: insecure loading of ICU data through ICU_DATA environment variable
  36. CVE-2023-23919Node.js: OpenSSL error handling issues in nodejs crypto library
  37. CVE-2023-23918Node.js: Permissions policies can be bypassed via process.mainModule
  38. CVE-2023-23916curl: HTTP multi-header compression denial of service
  39. CVE-2023-23915curl: HSTS amnesia with --parallel
  40. CVE-2023-23914curl: HSTS ignored on multiple requests
  41. CVE-2023-23908hw: Intel: 3rd Generation processors may allow information disclosure
  42. CVE-2023-23605Mozilla: Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7
  43. CVE-2023-23603Mozilla: Calls to console.log allowed bypasing Content Security Policy via format directive
  44. CVE-2023-23602Mozilla: Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers
  45. CVE-2023-23601Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation
  46. CVE-2023-23599Mozilla: Malicious command could be hidden in devtools output
  47. CVE-2023-23598Mozilla: Arbitrary file read from GTK drag and drop on Linux
  48. CVE-2023-23586kernel: io_uring: read use-after-free can lead to kernel memory leak
  49. CVE-2023-23583hw: Intel: execution of MOVSB instructions with redundant REX prefix leads to unintended system behavior
  50. CVE-2023-23559kernel: Integer overflow in function rndis_query_oid of rndis_wlan.c
CVE 2023 document archive — Page 49 | PulseLinux