CVE Vulnerability Catalog

A vulnerability exists in Avahi where a reachable assertion occurs in avahi_dns_packet_append_record. Crafted DNS packets can cause the daemon to abort.

A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel Samba server and CIFS in the Linux kernel. An attacker could crash the system by accessing freed work.

A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to bypass IP address restrictions. This is due to improper parsing of the configuration for IP geolocation rules.

A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to intercept the SAML assertion of a user authenticating to a remote access VPN session. The issue is due to insufficient validation of the login URL.

A vulnerability in the remote access SSL VPN feature of Cisco ASA and FTD Software could allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect using only a valid username and password. This is due to improper error handling during remote access VPN authentication. An attacker could send crafted requests during session establishment, bypassing the certificate policy while retaining privileges.

Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass configured policies. This is due to a logic error when access control policies are populated. An attacker could exploit this by establishing a connection, potentially bypassing access control rules.

A vulnerability in the Snort detection engine in multiple Cisco products could allow an unauthenticated, remote attacker to bypass configured policies. This is due to a flaw in the FTP module. An attacker could send crafted FTP traffic to bypass FTP inspection and deliver a malicious payload.

A vulnerability in the TLS 1.3 implementation of Cisco FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This is due to a logic error in memory allocation handling during a TLS 1.3 session. An attacker could send a crafted TLS 1.3 message sequence to cause a reload, resulting in a DoS condition.

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This is due to an implementation error in SSL/TLS session handling that can prevent the release of a session handler under specific conditions. An attacker could exploit this by sending crafted SSL/TLS traffic, increasing the probability of session handler leaks and eventually depleting the available pool.

A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This is due to a logic error when an SSL/TLS certificate under load is accessed during SSL connection initiation. An attacker could send a high rate of SSL/TLS connection requests, causing the engine to reload, resulting in a bypass or DoS condition depending on configuration.

A vulnerability in the interaction between the SMB protocol preprocessor and the Snort 3 detection engine in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured policies or cause a denial of service (DoS) condition. The issue is due to improper error-checking when processing SMB traffic. An attacker could exploit this by sending a crafted SMB packet stream, potentially causing the Snort process to reload and resulting in DoS.

Multiple vulnerabilities in the per-user-override feature of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to bypass a configured ACL and allow traffic that should be denied. These vulnerabilities are due to a logic error in constructing and applying per-user-override rules. A successful exploit could allow the attacker to bypass the interface ACL and access protected resources.

Multiple vulnerabilities in the per-user-override feature of Cisco ASA and FTD Software could allow an unauthenticated, remote attacker to bypass a configured ACL and allow traffic that should be denied. These vulnerabilities are due to a logic error in constructing and applying per-user-override rules. A successful exploit could allow the attacker to bypass the interface ACL and access protected resources.

A vulnerability in the SSL file policy implementation of Cisco FTD Software during SSL/TLS inspection with a URL Category could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to unexpectedly restart. This is due to a logic error when inspecting SSL/TLS connections with URL Category configured. An attacker could send a crafted SSL/TLS connection to trigger a reload, resulting in bypass or DoS.

In pypdf versions 3.7.0 through 3.16.4, an attacker can craft a PDF that causes an infinite loop. The loop blocks the current process and can utilize a single CPU core at 100%, without affecting memory usage. This is fixed in version 3.17.0.

In the Linux kernel through 6.5.9, a race with SQ thread exit can cause a NULL pointer dereference in io_uring/fdinfo.c during io_uring_show_fdinfo.

Vim has a use-after-free vulnerability in memory allocated in the `ga_grow_inner` function. This issue can occur when using the `:history` command, leading to an integer overflow and potential use-after-free.

A use-after-free flaw was found in the xorg-x11-server that may lead to an X server crash in a specific multi-screen configuration. The issue occurs when the pointer is warped from a window on one screen to the root window of another screen, followed by the destruction of the original window and then another window.

When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack. This vulnerability affects Firefox for iOS < 119.

An out-of-bounds read flaw was found in the GRUB2 NTFS filesystem driver. A physically present attacker can present a specially crafted NTFS image to read arbitrary memory locations. A successful attack allows sensitive data cached in memory or EFI variable values to be leaked, posing a high confidentiality risk.