PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 59

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 59 / 63

  1. CVE-2023-3301QEMU: net: triggerable assertion due to race condition in hot-unplug
  2. CVE-2023-3297accountsservice: use-after-free via a D-Bus message to the accounts-daemon process
  3. CVE-2023-3269kernel: distros-[DirtyVMA] Privilege escalation via non-RCU-protected VMA traversal
  4. CVE-2023-3268kernel: out-of-bounds access in relay_file_read
  5. CVE-2023-3255QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service
  6. CVE-2023-3247php: Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  7. CVE-2023-3220kernel: NULL pointer dereference in dpu_crtc_atomic_check() in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c
  8. CVE-2023-3212kernel: gfs2: NULL pointer dereference in gfs2_evict_inode()
  9. CVE-2023-3195ImageMagick: stack overflow in coders/tiff.c while parsing malicious tiff file
  10. CVE-2023-3180QEMU: virtio-crypto: heap buffer overflow in virtio_crypto_sym_op_helper()
  11. CVE-2023-3164libtiff: heap-buffer-overflow in extractImageSection()
  12. CVE-2023-3161kernel: fbcon: shift-out-of-bounds in fbcon_set_font()
  13. CVE-2023-3159kernel: use after free issue in driver/firewire in outbound_phy_packet_callback
  14. CVE-2023-3153ovn: service monitor MAC flow is not rate limited
  15. CVE-2023-3141kernel: Use after free bug in r592_remove
  16. CVE-2023-3138libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow
  17. CVE-2023-3128grafana: account takeover possible when using Azure AD OAuth
  18. CVE-2023-3111kernel: Use after free in prepare_to_relocate in fs/btrfs/relocation.c
  19. CVE-2023-3108kernel: A race condition in crypto module in the function skcipher_recvmsg
  20. CVE-2023-3106kernel: Netlink socket crash (null pointer deref) in netlink_dump function
  21. CVE-2023-3090kernel: ipvlan: out-of-bounds write caused by unclear skb->cb
  22. CVE-2023-3022kernel: IPv6: panic in fib6_rule_suppress when fib6_rule_lookup fails
  23. CVE-2023-3019QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
  24. CVE-2023-3006RHEL: Add Spectre-BHB mitigation for AmpereOne
  25. CVE-2023-2985kernel: use-after-free issue in hfsplus_release_folio in fs/hfsplus/super.c
  26. CVE-2023-2977opensc: buffer overrun vulnerability in pkcs15 cardos_have_verifyrc_package
  27. CVE-2023-2976guava: insecure temporary directory creation
  28. CVE-2023-2975openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries
  29. CVE-2023-2961advancecomp: SEGV via invalid read address
  30. CVE-2023-2953openldap: null pointer dereference in ber_memalloc_x function
  31. CVE-2023-2952wireshark: XRA dissector infinite loop
  32. CVE-2023-2911bind: Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0
  33. CVE-2023-2908libtiff: null pointer dereference in tif_dir.c
  34. CVE-2023-2906wireshark: possible Denial of Service via crafted package
  35. CVE-2023-2898kernel: A null-ptr-deref bug in f2fs_write_end_io in fs/f2fs/data.c
  36. CVE-2023-2879wireshark: infinite loop in GDSDB dissector
  37. CVE-2023-2861QEMU: 9pfs: improper access control on special files
  38. CVE-2023-2860kernel: ipv6: sr: out-of-bounds read when setting HMAC data
  39. CVE-2023-2858wireshark: NetScaler file parser crash
  40. CVE-2023-2857wireshark: BLF file parser crash
  41. CVE-2023-2856wireshark: VMS TCPIPtrace file parser crash
  42. CVE-2023-2855wireshark: Candump log file parser crash
  43. CVE-2023-2854wireshark: BLF file parser crash
  44. CVE-2023-2829bind: DNSSEC-Validated cache can be remotely terminated with malformed NSEC record
  45. CVE-2023-2828bind: named's configured cache size limit can be significantly exceeded
  46. CVE-2023-2804libjpeg-turbo: heap-buffer-overflow in h2v2_merged_upsample_internal() at /libjpeg-turbo/jdmrgext.c
  47. CVE-2023-2801grafana: data source proxy race condition
  48. CVE-2023-2731libtiff: null pointer deference in LZWDecode() in libtiff/tif_lzw.c
  49. CVE-2023-2700libvirt: Memory leak in virPCIVirtualFunctionList cleanup
  50. CVE-2023-2680QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750)
CVE 2023 document archive — Page 59 | PulseLinux