PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 55

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 55 / 63

  1. CVE-2023-6040kernel: netfilter: nf_tables: out-of-bounds access in nf_tables_newtable()
  2. CVE-2023-6039kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect
  3. CVE-2023-6004libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname
  4. CVE-2023-5992OpenSC: Side-channel leaks while stripping encryption PKCS#1 padding
  5. CVE-2023-5981gnutls: timing side-channel in the RSA-PSK authentication
  6. CVE-2023-5972kernel: The NFTA_INNER_NUM and NFTA_EXPR_NAME netlink attributes accessed without checking its presence in nft_inner.c
  7. CVE-2023-5871libnbd: Malicious NBD server may crash libnbd
  8. CVE-2023-5870postgresql: Role pg_signal_backend can signal certain superuser processes.
  9. CVE-2023-5869postgresql: Buffer overrun from integer overflow in array modification
  10. CVE-2023-5868postgresql: Memory disclosure in aggregate function calls
  11. CVE-2023-5841OpenEXR: Heap Overflow in Scanline Deep Data Parsing
  12. CVE-2023-5824squid: DoS against HTTP and HTTPS
  13. CVE-2023-5752pip: Mercurial configuration injectable in repo revision when installing via pip
  14. CVE-2023-5732Mozilla: Address bar spoofing via bidirectional characters
  15. CVE-2023-5730Mozilla: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4
  16. CVE-2023-5728Mozilla: Improper object tracking during GC in the JavaScript engine could have led to a crash.
  17. CVE-2023-5727Mozilla: Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows
  18. CVE-2023-5726Mozilla: Full screen notification obscured by file open dialog on macOS
  19. CVE-2023-5725Mozilla: WebExtensions could open arbitrary URLs
  20. CVE-2023-5724Mozilla: Large WebGL draw could have led to a crash
  21. CVE-2023-5721Mozilla: Queued up rendering could have allowed websites to clickjack
  22. CVE-2023-5717kernel: A heap out-of-bounds write when function perf_read_group is called and sibling_list is smaller than its child's sibling_list
  23. CVE-2023-5680bind9: Cleaning an ECS-enabled cache may cause excessive CPU load
  24. CVE-2023-5679bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution
  25. CVE-2023-5678openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow
  26. CVE-2023-5676JDK: Eclipse OpenJ9 JVM denial of service
  27. CVE-2023-5633kernel: vmwgfx: reference count issue leads to use-after-free in surface handling
  28. CVE-2023-5616gnome-control-center: Remote login misconfiguration in GNOME Control Center
  29. CVE-2023-5574xorg-x11-server: Use-after-free bug in DamageDestroy
  30. CVE-2023-5568samba: heap buffer overflow with freshness tokens in the Heimdal KDC
  31. CVE-2023-5557tracker-miners: sandbox escape
  32. CVE-2023-5535vim: use after free
  33. CVE-2023-5517bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled
  34. CVE-2023-5455ipa: Invalid CSRF protection
  35. CVE-2023-5441vim: NULL pointer dereference in screen_line() in src/screen.c
  36. CVE-2023-5388nss: timing attack against RSA decryption
  37. CVE-2023-5380xorg-x11-server: Use-after-free bug in DestroyWindow
  38. CVE-2023-5371wireshark: RTPS dissector memory leak
  39. CVE-2023-5367xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
  40. CVE-2023-5366openvswitch: openvswitch don't match packets on nd_target field
  41. CVE-2023-5363openssl: Incorrect cipher key and IV length processing
  42. CVE-2023-5345kernel: use-after-free vulnerability in the smb client component
  43. CVE-2023-5344vim: Heap-based Buffer Overflow in trunc_string()
  44. CVE-2023-5342shim: Expired secure boot certificate
  45. CVE-2023-5217libvpx: Heap buffer overflow in vp8 encoding in libvpx
  46. CVE-2023-5215libnbd: Crash or misbehaviour when NBD server returns an unexpected block size
  47. CVE-2023-5197kernel: netfilter: nf_tables: use-after-free due to addition and removal of rules from chain bindings within the same transaction
  48. CVE-2023-5178kernel: use after free in nvmet_tcp_free_crypto in NVMe
  49. CVE-2023-5176Mozilla: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3
  50. CVE-2023-5174Mozilla: Double-free in process spawning on Windows
CVE 2023 document archive — Page 55 | PulseLinux