PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2023 document archive · 61

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,136 documents · Identifier year 2023 · 61 / 63

  1. CVE-2023-1916libtiff: out-of-bounds read in extractImageSection() in tools/tiffcrop.c
  2. CVE-2023-1906ImageMagick: heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  3. CVE-2023-1872kernel: io_uring: use-after-free vulnerability in io_file_get_fixed
  4. CVE-2023-1859kernel: Use after free in xen_9pfs_front_remove due to race condition
  5. CVE-2023-1855kernel: use-after-free bug in remove function xgene_hwmon_remove
  6. CVE-2023-1838kernel: Possible use-after-free since the two fdget() during vhost_net_set_backend()
  7. CVE-2023-1829kernel: Use-after-free vulnerability in the Linux Kernel traffic control index filter
  8. CVE-2023-1801tcpdump: OOB write in SMB decoder
  9. CVE-2023-1786cloud-init: sensitive data could be exposed in logs
  10. CVE-2023-1729LibRaw: a heap-buffer-overflow in raw2image_ex()
  11. CVE-2023-1672tang: Race condition exists in the key generation and rotation functionality
  12. CVE-2023-1670kernel: use after free bug in xirc2ps_detach
  13. CVE-2023-1668openvswitch: ip proto 0 triggers incorrect handling
  14. CVE-2023-1667libssh: NULL pointer dereference during rekeying with algorithm guessing
  15. CVE-2023-1652Kernel: use-after-free in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c
  16. CVE-2023-1637kernel: save/restore speculative MSRs during S3 suspend/resume
  17. CVE-2023-1611Kernel: race between quota disable and quota assign ioctls in fs/btrfs/ioctl.c
  18. CVE-2023-1583kernel: NULL pointer dereference in io_file_bitmap_get in io_uring/filetable.c
  19. CVE-2023-1582kernel: Soft lockup occurred during __page_mapcount
  20. CVE-2023-1579binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64
  21. CVE-2023-1544QEMU: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read()
  22. CVE-2023-1513kernel: KVM: information leak in KVM_GET_DEBUGREGS ioctl on 32-bit systems
  23. CVE-2023-1476kpatch: mm/mremap.c: incomplete fix for CVE-2022-41222
  24. CVE-2023-1436jettison: Uncontrolled Recursion in JSONArray
  25. CVE-2023-1428gRPC: Reachable Assertion
  26. CVE-2023-1410grafana: Stored XSS in Graphite FunctionDescription tooltip
  27. CVE-2023-1393xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability
  28. CVE-2023-1390kernel: remote DoS in TIPC kernel module
  29. CVE-2023-1387grafana: JWT token leak to data source
  30. CVE-2023-1386QEMU: 9pfs: SUID/SGID bits not dropped on file write
  31. CVE-2023-1382kernel: denial of service in tipc_conn_close
  32. CVE-2023-1380Kernel: a USB-accessible slab-out-of-bounds read in brcmfmac
  33. CVE-2023-1355vim: null pointer dereference in class_object_index at vim9class.c
  34. CVE-2023-1295kernel: io_uring: TOCTOU vulnerability in IORING_OP_CLOSE operation
  35. CVE-2023-1289ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
  36. CVE-2023-1281kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation
  37. CVE-2023-1264vim: NULL pointer dereference issue in utfc_ptr2len
  38. CVE-2023-1255openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM
  39. CVE-2023-1252kernel: ovl: fix use after free in struct ovl_aio_req
  40. CVE-2023-1249kernel: missing mmap_lock in file_files_note that could possibly lead to a use after free in the coredump code
  41. CVE-2023-1206kernel: hash collisions in the IPv6 connection lookup table
  42. CVE-2023-1195kernel: use-after-free caused by invalid pointer hostname in fs/cifs/connect.c
  43. CVE-2023-1194kernel: use-after-free in parse_lease_state()
  44. CVE-2023-1193kernel: use-after-free in setup_async_work()
  45. CVE-2023-1192kernel: use-after-free in smb2_is_status_io_timeout()
  46. CVE-2023-1183libreoffice: Arbitrary file write
  47. CVE-2023-1175vim: Incorrect Calculation of Buffer Size
  48. CVE-2023-1170vim: Heap-based Buffer Overflow
  49. CVE-2023-1161wireshark: ISO 15765 and ISO 10681 dissector crash
  50. CVE-2023-1127vim: Divide By Zero in vim/vim
CVE 2023 document archive — Page 61 | PulseLinux