PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 54

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 54 / 63

  1. CVE-2023-6856Mozilla: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver
  2. CVE-2023-6817kernel: inactive elements in nft_pipapo_walk
  3. CVE-2023-6816xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
  4. CVE-2023-6780glibc: integer overflow in __vsyslog_internal()
  5. CVE-2023-6779glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()
  6. CVE-2023-6710mod_cluster/mod_proxy_cluster: Stored Cross site Scripting
  7. CVE-2023-6693QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx()
  8. CVE-2023-6683QEMU: VNC: NULL pointer dereference in qemu_clipboard_request()
  9. CVE-2023-6681JWCrypto: denail of service Via specifically crafted JWE
  10. CVE-2023-6679kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c
  11. CVE-2023-6622kernel: null pointer dereference vulnerability in nft_dynset_init()
  12. CVE-2023-6610kernel: OOB Access in smb2_dump_detail
  13. CVE-2023-6606kernel: Out-Of-Bounds Read vulnerability in smbCalcSize
  14. CVE-2023-6597python: Path traversal on tempfile.TemporaryDirectory
  15. CVE-2023-6560kernel: io_uring out of boundary memory access in __io_uaddr_map()
  16. CVE-2023-6546kernel: GSM multiplexing race condition leads to privilege escalation
  17. CVE-2023-6536kernel: NULL pointer dereference in __nvmet_req_complete
  18. CVE-2023-6535kernel: NULL pointer dereference in nvmet_tcp_execute_request
  19. CVE-2023-6531kernel: GC's deletion of an SKB races with unix_stream_read_generic() leading to UAF
  20. CVE-2023-6516bind9: Specific recursive query patterns may lead to an out-of-memory condition
  21. CVE-2023-6507python: Improper privileges drop on subprocess module
  22. CVE-2023-6478xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
  23. CVE-2023-6377xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
  24. CVE-2023-6356kernel: NULL pointer dereference in nvmet_tcp_build_iovec
  25. CVE-2023-6349libvpx: Heap buffer overflow related to VP9 encoding
  26. CVE-2023-6277libtiff: Out-of-memory in TIFFOpen via a craft file
  27. CVE-2023-6270kernel: AoE: improper reference count leads to use-after-free vulnerability
  28. CVE-2023-6246glibc: heap-based buffer overflow in __vsyslog_internal()
  29. CVE-2023-6240kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation
  30. CVE-2023-6238kernel: nvme: memory corruption via unprivileged user passthrough
  31. CVE-2023-6237openssl: Excessive time spent checking invalid RSA public keys
  32. CVE-2023-6228libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c
  33. CVE-2023-6212Mozilla: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5
  34. CVE-2023-6209Mozilla: Incorrect parsing of relative URLs starting with "///"
  35. CVE-2023-6208Mozilla: Using Selection API would copy contents into X11 primary selection.
  36. CVE-2023-6207Mozilla: Use-after-free in ReadableByteStreamQueueEntry::Buffer
  37. CVE-2023-6206Mozilla: Clickjacking permission prompts using the fullscreen transition
  38. CVE-2023-6205Mozilla: Use-after-free in MessagePort::Entangled
  39. CVE-2023-6204Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer
  40. CVE-2023-6200kernel: ICMPv6 Router Advertisement packets, aka Linux TCP/IP Remote Code Execution Vulnerability
  41. CVE-2023-6186libreoffice: Insufficient macro permission validation leading to macro execution
  42. CVE-2023-6185libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution
  43. CVE-2023-6176kernel: local dos vulnerability in scatterwalk_copychunks
  44. CVE-2023-6175wireshark: NetScreen File Parsing Heap-based Buffer Overflow
  45. CVE-2023-6174wireshark: SSH dissector invalid read of memory blocks
  46. CVE-2023-6152grafana: email verification bypass
  47. CVE-2023-6135nss: vulnerable to Minerva side-channel information leak
  48. CVE-2023-6129openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC
  49. CVE-2023-6121kernel: NVMe: info leak due to out-of-bounds read in nvmet_ctrl_find_get
  50. CVE-2023-6111kernel: netfilter: use-after-free when removing catchall element in GC sync path
CVE 2023 document archive — Page 54 | PulseLinux