CVE Vulnerability Catalog

In SunOS, NFS file handles could be guessed, leading to unauthorized access to the exported file system.

A vulnerability in rdist on various UNIX systems allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable when executing sendmail using popen.

Vulnerability in /usr/bin/mail in DEC ULTRIX before version 4.2 allows local users to gain elevated privileges.

The rpc.pwdauthd service in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, allowing remote attackers to obtain sensitive system information.

VMS versions 4.0 through 5.3 allow local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.

The selection_svc facility in SunView (SunTools) allows remote users to read files.

Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges.

A vulnerability in the Linux kernel related to freemap adjustments when adding extended attributes (xattrs) to leaf blocks has been resolved. This issue caused an assertion failure in the freemap adjustment code after approximately 20 minutes of running on virtual machines.

In libxml2 before 2.11.0, xmlXIncludeAddNode in xinclude.c has a use-after-free vulnerability.

In the Linux kernel, a vulnerability related to the pstore: ram_core function has been fixed, which incorrectly returned a success pointer when the vmap() function failed.

A vulnerability has been identified in the Linux kernel related to ARM processor errors, occurring when the BIOS generates a very small or incomplete error. This can lead to improper memory dereferencing.

A vulnerability has been identified in the Linux kernel related to the failure to free memory in case of an error. Specifically, the screen buffer fbi->fb.screen_buffer is allocated using dma_alloc_coherent() but is not freed if an error occurs.

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This may allow an attacker to trigger memory allocation failures, causing a segmentation fault and application crash.

The Diffie-Hellman Key Agreement Protocol allows long exponents, making certain calculations unnecessarily expensive. The 1996 van Oorschot and Wiener paper showed that appropriately short exponents can be used with adequate subgroup constraints, but these are not utilized.

In CPython, the venv module and CLI do not properly quote paths when creating a virtual environment, allowing injection of commands into activation scripts (e.g., source venv/bin/activate). This enables arbitrary code execution upon activation.

A vulnerability in the Linux kernel leads to a General Protection Fault (GPF) in the write_page() function during array resize. This issue is caused by a use-after-free race between bitmap_daemon_work().

A high severity vulnerability in the CPython zipfile module affecting zipfile.Path. When iterating over entry names in a zip archive (e.g., namelist(), iterdir()), unexpected behavior may occur. The more common zipfile.ZipFile class is unaffected.

In the Linux kernel, a vulnerability related to a resource leak in the cx25821_dev_setup() function has been fixed. The issue occurred when ioremap() failed, leading to the memory region obtained by cx25821_get_resources() not being released.

A vulnerability in the Linux kernel related to double free in the pruss_clk_mux_setup() function has been resolved. The issue occurred during the call to devm_add_action_or_reset(), which triggered pruss_of_free_clk_provider() on error.

A vulnerability in the Linux kernel related to reserving slots for the clk_hw structure in the 9FGV0841 has been resolved. The issue concerns the lack of sufficient slots for eight outputs, which may lead to out-of-bounds writes.