CVE Vulnerability Catalog

A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.

A heap buffer overflow flaw was found in Libtiff's tiffinfo.c in the TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

A vulnerability in libjpeg-turbo causes a null pointer dereference in jcopy_sample_rows() when processing a crafted input file. This can lead to a crash of the application using the library.

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel's filesystem sub-component. This flaw allows a local attacker with user privilege to cause a denial of service.

A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.

A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance on an AMD CPU that supports Secure Encrypted Virtualization (SEV).

In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.

A NULL pointer dereference vulnerability in the Vim editor prior to version 9.0.0259. The flaw can be triggered by specific input and lead to an application crash.

In Kirby 2.5.12, a CSRF vulnerability was found in the delete page functionality. A remote attacker can craft a malicious CSRF page and force the user to delete a page.

The vulnerability allows an authenticated user to read sensitive session data stored in cleartext in the OAuth database. The affected device does not encrypt this information.

A NULL pointer dereference flaw was found in GnuTLS. Nettle's hash update functions internally call memcpy, and providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.

A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.

A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel.

It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.

A flaw was found in AMQ Broker that can lead to partial interruption of system availability due to an Out of Memory (OOM) condition. An attacker can partially disrupt availability to the broker through a sustained attack of maliciously crafted messages.

A vulnerability in the inode_init_owner() function logic in the Linux kernel (fs/inode.c) allows local users to create files on XFS filesystems with unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a group not containing the user. This can lead to excessive permissions.

A flaw was found in systemd where uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.

A memory overflow vulnerability was found in the Linux kernel's ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability.

A flaw was found in the Linux kernel's memory deduplication mechanism. Previous work has shown that memory deduplication can be attacked via a local exploitation mechanism; the same technique can be used if an attacker can upload page-sized files and detect access time changes from a networked service to determine if a page has been merged.

In Apache ActiveMQ Artemis prior to version 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.