PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 58

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 58 / 63

  1. CVE-2023-3978golang.org/x/net/html: Cross site scripting
  2. CVE-2023-3972insights-client: unsafe handling of temporary files and directories
  3. CVE-2023-3966openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet
  4. CVE-2023-3961samba: smbd allows client access to unix domain sockets on the file system as root
  5. CVE-2023-3899subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration
  6. CVE-2023-3896vim: Divide by zero in scroll_cursor_bot
  7. CVE-2023-3867kernel: Out of bounds read in smb2_sess_setup
  8. CVE-2023-3866kernel: ksmbd Chained Request NULL Pointer Dereference
  9. CVE-2023-3865kernel: Out of bounds read in smb2_write
  10. CVE-2023-3863kernel: use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c
  11. CVE-2023-3824php: phar Buffer mismanagement
  12. CVE-2023-3823php: XML loading external entity without being enabled
  13. CVE-2023-3817OpenSSL: Excessive time spent checking DH q parameter value
  14. CVE-2023-3812kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
  15. CVE-2023-3777kernel: use-after-free in netfilter: nf_tables
  16. CVE-2023-3776kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function
  17. CVE-2023-3773kernel: xfrm: out-of-bounds read of XFRMA_MTIMER_THRESH nlattr
  18. CVE-2023-3772kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params()
  19. CVE-2023-3758sssd: Race condition during authorization leads to GPO policies functioning inconsistently
  20. CVE-2023-3750libvirt: improper locking in virStoragePoolObjListSearch may lead to denial of service
  21. CVE-2023-3748frr: Inifinite loop in babld message parsing may cause DoS
  22. CVE-2023-3745ImageMagick: heap-buffer-overflow in PushCharPixel() in quantum-private.h
  23. CVE-2023-3674keylime: Attestation failure when the quote's signature does not validate
  24. CVE-2023-3640Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space
  25. CVE-2023-3618libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c
  26. CVE-2023-3611kernel: net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue overhead
  27. CVE-2023-3610kernel: netfilter: nf_tables: fix chain binding transaction logic in the abort path of NFT_MSG_NEWRULE
  28. CVE-2023-3609kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails
  29. CVE-2023-3603libssh: Processing SFTP server read may cause NULL dereference
  30. CVE-2023-3600firefox: use-after-free in workers
  31. CVE-2023-3576libtiff: memory leak in tiffcrop.c
  32. CVE-2023-3567kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race
  33. CVE-2023-3446openssl: Excessive time spent checking DH keys and parameters
  34. CVE-2023-3439kernel: mctp: use-after-free read in mctp_local_output()
  35. CVE-2023-3428ImageMagick: heap-buffer-overflow in coders/tiff.c
  36. CVE-2023-3417thunderbird: File Extension Spoofing using the Text Direction Override Character
  37. CVE-2023-3397kernel: slab-use-after-free Write in txEnd due to race condition
  38. CVE-2023-3390kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests
  39. CVE-2023-3389kernel: Racing a io_uring cancel poll request with a linked timeout can cause a UAF in a hrtimer
  40. CVE-2023-3359kernel: brcm_nvram_parse in drivers/nvmem/brcm_nvram.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference
  41. CVE-2023-3358kernel: NULL pointer dereference due to missing kalloc() return value check in shtp_cl_get_dma_send_buf()
  42. CVE-2023-3357kernel: amd_sfh_hid_client_init in drivers/hid/amd-sfh-hid/amd_sfh_client.c lacks check of the return value of dma_alloc_coherent() and will cause the NULL Pointer Dereference.
  43. CVE-2023-3355kernel: NULL pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c
  44. CVE-2023-3354QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service
  45. CVE-2023-3347samba: SMB2 packet signing is not enforced when "server signing = required" is set
  46. CVE-2023-3341bind: stack exhaustion in control channel code may lead to DoS
  47. CVE-2023-3338kernel: DECnet: crash due to a NULL pointer dereference in the dn_nsp_send function
  48. CVE-2023-3317kernel: use-after-free in wifi mt7921 fw features query
  49. CVE-2023-3316libtiff: tiffcrop: null pointer dereference in TIFFClose()
  50. CVE-2023-3312kernel: double free in IO unmap and resource release on exit in drivers/cpufreq/qcom-cpufreq-hw.c
CVE 2023 document archive — Page 58 | PulseLinux