PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 53

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 53 / 63

  1. CVE-2023-20861springframework: Spring Expression DoS Vulnerability
  2. CVE-2023-20860springframework: Security Bypass With Un-Prefixed Double Wildcard Pattern
  3. CVE-2023-20598hw: amd: AMD Radeon Graphics Kernel Driver Privilege Management Vulnerability
  4. CVE-2023-20593hw: amd: Cross-Process Information Leak
  5. CVE-2023-20592hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem
  6. CVE-2023-20589hw: amd: fTPM Voltage Fault Injection
  7. CVE-2023-20588hw: amd: division-by-zero may resulting in loss of confidentiality
  8. CVE-2023-20587hw: amd: failure to sanitize input in SMM
  9. CVE-2023-20585kernel-core: hw: amd: AMD-SN-3016: IOMMU Write Buffer Vulnerability
  10. CVE-2023-20584kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity
  11. CVE-2023-20583kernel: AMD-SB-7006: potential power side-channel vulnerability in AMD processor
  12. CVE-2023-20579hw: amd: SPI bypass
  13. CVE-2023-20577hw: amd: SPI flash RCE
  14. CVE-2023-20576hw: amd: Insufficient Verification of Data Authenticity in AGESATM
  15. CVE-2023-20575hw: amd: SEV VM Power Side Channel Security Notice
  16. CVE-2023-20573kernel: hw: AMD Secure Nested Paging Debug Exception
  17. CVE-2023-20569amd: Return Address Predictor vulnerability leading to information disclosure
  18. CVE-2023-20564hw: amd: RyzenTM Master allow memory reads/writes potentially leading to confidentiality threat
  19. CVE-2023-20562hw: amd: uProf allow unsigned driver to load
  20. CVE-2023-20561hw: amd: uProf allow user to send arbitrary address leading to dos
  21. CVE-2023-20560hw: amd: RyzenTM Master provide a null value access leading to denial of service
  22. CVE-2023-20556hw: amd: uProf allow user to send arbitrary buffer leading to dos
  23. CVE-2023-20555hw: AMD: SMM Memory Corruption Vulnerability
  24. CVE-2023-7356kernel: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
  25. CVE-2023-7324kernel: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
  26. CVE-2023-7256libpcap: Double Free in libcap
  27. CVE-2023-7250iperf3: possible denial of service
  28. CVE-2023-7216CPIO: extraction allows symlinks which enables Remote Command Execution
  29. CVE-2023-7207cpio: path traversal vulnerability
  30. CVE-2023-7192kernel: refcount leak in ctnetlink_create_conntrack()
  31. CVE-2023-7104sqlite: heap-buffer-overflow at sessionfuzz
  32. CVE-2023-7090sudo: Improper handling of ipa_hostname leads to privilege mismanagement
  33. CVE-2023-7042kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
  34. CVE-2023-7008systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes
  35. CVE-2023-6932kernel: use-after-free in IPv4 IGMP
  36. CVE-2023-6931kernel: Out of boundary write in perf_read_group() as result of overflow a perf_event's read_size
  37. CVE-2023-6918libssh: Missing checks for return values for digests
  38. CVE-2023-6917pcp: unsafe use of directories allows pcp to root privilege escalation
  39. CVE-2023-6915kernel: Null Pointer Dereference vulnerability in ida_free in lib/idr.c
  40. CVE-2023-6879aom: heap-buffer-overflow on frame size change
  41. CVE-2023-6867Mozilla: Clickjacking permission prompts using the popup transition
  42. CVE-2023-6865Mozilla: Potential exposure of uninitialized data in EncryptingOutputStream
  43. CVE-2023-6864Mozilla: Memory safety bugs fixed in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6
  44. CVE-2023-6863Mozilla: Undefined behavior in ShutdownObserver()
  45. CVE-2023-6862Mozilla: Use-after-free in nsDNSService
  46. CVE-2023-6861Mozilla: Heap buffer overflow affected nsWindow::PickerOpen(void) in headless mode
  47. CVE-2023-6860Mozilla: Potential sandbox escape due to VideoBridge lack of texture validation
  48. CVE-2023-6859Mozilla: Use-after-free in PR_GetIdentitiesLayer
  49. CVE-2023-6858Mozilla: Heap buffer overflow in nsTextFragment
  50. CVE-2023-6857Mozilla: Symlinks may resolve to smaller than expected buffers
CVE 2023 document archive — Page 53 | PulseLinux