PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 57

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 57 / 63

  1. CVE-2023-4512wireshark: DoS (crash) via packet injection or crafted capture file
  2. CVE-2023-4511wireshark: DoS (infinite loop) via packet injection or crafted capture file
  3. CVE-2023-4504libppd: Postscript Parsing Heap Overflow
  4. CVE-2023-4459kernel: vmxnet3: NULL pointer dereference in vmxnet3_rq_cleanup()
  5. CVE-2023-4458kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability
  6. CVE-2023-4421nss: new tlsfuzzer code can still detect timing issues in RSA operations
  7. CVE-2023-4408bind9: Parsing large DNS messages may cause excessive CPU load
  8. CVE-2023-4394kernel: btrfs: memory leak in btrfs_get_dev_args_from_path()
  9. CVE-2023-4389kernel: btrfs: double free in btrfs_get_root_ref()
  10. CVE-2023-4387kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()
  11. CVE-2023-4385kernel: jfs: NULL pointer dereference in dbFree()
  12. CVE-2023-4273kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry
  13. CVE-2023-4244kernel: Use-after-free in nft_verdict_dump due to a race between set GC and transaction
  14. CVE-2023-4236bind: an assertion failure may lead to DoS
  15. CVE-2023-4211kernel: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
  16. CVE-2023-4208kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route
  17. CVE-2023-4207kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route
  18. CVE-2023-4206kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route
  19. CVE-2023-4194kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid
  20. CVE-2023-4156gawk: heap out of bound read in builtin.c
  21. CVE-2023-4155kernel: KVM: SEV-ES / SEV-SNP VMGEXIT double fetch vulnerability
  22. CVE-2023-4154samba: AD DC password exposure to privileged users and RODCs
  23. CVE-2023-4147kernel: netfilter: nf_tables_newrule when adding a rule with NFTA_RULE_CHAIN_ID leads to use-after-free
  24. CVE-2023-4135QEMU: NVMe: out-of-bounds read information disclosure vulnerability
  25. CVE-2023-4134kernel: cyttsp4_core: use-after-free in cyttsp4_watchdog_work()
  26. CVE-2023-4133kernel: cxgb4: use-after-free in ch_flower_stats_cb()
  27. CVE-2023-4132kernel: smsusb: use-after-free caused by do_submit_urb()
  28. CVE-2023-4130kernel: ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
  29. CVE-2023-4128kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route
  30. CVE-2023-4091samba: SMB clients can truncate files with read-only permissions
  31. CVE-2023-4057Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1
  32. CVE-2023-4056Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
  33. CVE-2023-4055Mozilla: Cookie jar overflow caused unexpected cookie jar state
  34. CVE-2023-4054Mozilla: Lack of warning when opening appref-ms files
  35. CVE-2023-4053Mozilla: Full screen notification obscured by external program
  36. CVE-2023-4052Mozilla: File deletion and privilege escalation through Firefox uninstaller
  37. CVE-2023-4051Mozilla: Full screen notification obscured by file open dialog
  38. CVE-2023-4050Mozilla: Stack buffer overflow in StorageManager
  39. CVE-2023-4049Mozilla: Fix potential race conditions when releasing platform objects
  40. CVE-2023-4048Mozilla: Crash in DOMParser due to out-of-memory conditions
  41. CVE-2023-4047Mozilla: Potential permissions request bypass via clickjacking
  42. CVE-2023-4046Mozilla: Incorrect value used during WASM compilation
  43. CVE-2023-4045Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions
  44. CVE-2023-4042ghostscript: Incomplete fix for CVE-2020-16305
  45. CVE-2023-4039gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64
  46. CVE-2023-4016procps: ps buffer overflow
  47. CVE-2023-4015kernel: use after free in nft_immediate_deactivate
  48. CVE-2023-4010kernel: usb: hcd: malformed USB descriptor leads to infinite loop in usb_giveback_urb()
  49. CVE-2023-4004kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
  50. CVE-2023-4001grub2: bypass the GRUB password protection feature
CVE 2023 document archive — Page 57 | PulseLinux